Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-114044: FreeRDP: FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP…	5.3 Medium	6.9 Medium	N/A	Oct 21, 2026
CVE-2026-114043: FreeRDP: FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because…	6.5 Medium	7.1 High	N/A	Oct 21, 2026
CVE-2026-114042: FreeRDP: FreeRDP 3.32.0 contains a use-after-free vulnerability in the drdynvc channel that frees a pool-owned stream with the…	6.5 Medium	7.1 High	N/A	Oct 21, 2026
CVE-2026-114041: FreeRDP: FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a…	6.5 Medium	6.9 Medium	N/A	Oct 21, 2026
CVE-2026-114038: Red Hat: A flaw was found in device-mapper-multipath	5.1 Medium	N/A	N/A	Oct 21, 2026
CVE-2026-113741: itsourcecode Online Cake Ordering System: A vulnerability has been found in itsourcecode Online Cake Ordering System 1.0	4.3 Medium	2.1 Low	N/A	Oct 21, 2026
CVE-2026-113740: itsourcecode Online Cake Ordering System: A flaw has been found in itsourcecode Online Cake Ordering System 1.0	6.3 Medium	2.1 Low	N/A	Oct 21, 2026
CVE-2026-113738: R6410418 Jackrong-llm-finetuning-guide: A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09	6.3 Medium	2.1 Low	N/A	Oct 21, 2026
CVE-2026-113737: R6410418 Jackrong-llm-finetuning-guide: A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09	5.5 Medium	2.0 Low	N/A	Oct 21, 2026
CVE-2026-113736: D-Link DHP-W610AV: A vulnerability has been found in D-Link DHP-W610AV 1.02EUb03	9.8 Critical	8.9 High	N/A	Oct 21, 2026
CVE-2026-111943: Go standard library crypto/x509: On most platforms, Go uses the given system root certificates	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-105044: Qingteng Host Adaptive Security Platform: Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in…	N/A	8.5 High	N/A	Oct 21, 2026
CVE-2025-71437: astral-sh uv: Astral uv before 0.8.22 contains a path traversal vulnerability in source distribution (sdist) tar extraction that…	6.5 Medium	8.7 High	N/A	Oct 21, 2026
CVE-2021-48020: vyperlang vyper: Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer…	6.5 Medium	8.3 High	N/A	Oct 21, 2026
CVE-2021-48019: vyperlang vyper: Vyper before 0.2.9 deploys forwarder proxies through the built-in create_forwarder_to function that report a fixed…	4.8 Medium	6.3 Medium	N/A	Oct 21, 2026
CVE-2021-48018: vyperlang vyper: Vyper from 0.2.13 before 0.2.15 allocates storage slots for @nonreentrant reentrancy locks at the same locations as…	7.4 High	8.3 High	N/A	Oct 21, 2026
CVE-2020-37289: vyperlang vyper: Vyper before 0.3.1 lacks a uint8 type, allowing interface return values declared as uint8, such as ERC20.decimals(), to…	3.7 Low	6.3 Medium	N/A	Oct 21, 2026
CVE-2020-37288: vyperlang vyper: Vyper from 0.1.0b10 before 0.2.3 generates incorrect code for a return statement inside a for loop in an internal…	3.7 Low	6.3 Medium	N/A	Oct 21, 2026
CVE-2020-37287: vyperlang vyper: Vyper before 0.2.6 contains a call stack corruption vulnerability that causes incorrect function outputs when complex…	5.9 Medium	8.2 High	N/A	Oct 21, 2026
CVE-2020-37286: vyperlang vyper: Vyper from 0.1.0b4 before 0.3.0 contains a memory corruption vulnerability caused by an incorrect stack tip pointer…	6.5 Medium	8.3 High	N/A	Oct 21, 2026
CVE-2026-113735: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.02	3.7 Low	2.9 Low	N/A	Oct 21, 2026
CVE-2026-113707: a2aproject a2a-rs: A security flaw has been discovered in a2aproject a2a-rs up to 0.4.4	5.4 Medium	5.3 Medium	N/A	Oct 21, 2026
CVE-2026-113706: a2aproject a2a-rs: A vulnerability was identified in a2aproject a2a-rs up to 0.4.3	3.5 Low	5.1 Medium	N/A	Oct 21, 2026
CVE-2026-109682: Rapid7 Metasploit Framework: Metasploit Framework versions before 6.5.7 allow HTTP requests made through send_request_cgi! to follow redirects to a…	4.7 Medium	N/A	N/A	Oct 21, 2026
CVE-2026-109681: Rapid7 Metasploit Framework: The FTP client trusts the server's PASV response IP:port without validation against the control connection target	4.7 Medium	N/A	N/A	Oct 21, 2026

Rows per page

476-500 of 417319

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business