Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-97749: Microsoft: Double free in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-97016: Microsoft: Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96957: Microsoft: Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature…	8.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96953: Microsoft: Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96951: Microsoft: Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an…	8.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96950: Microsoft: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96949: Microsoft: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96947: Microsoft: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96946: Microsoft: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96939: Microsoft: Time-of-check time-of-use (toctou) race condition in Servicing Stack Updates allows an authorized attacker to elevate…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96934: Microsoft: Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96924: Microsoft: Untrusted pointer dereference in Windows OLE allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96914: Microsoft: Integer overflow or wraparound in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to…	8.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96909: Microsoft: Heap-based buffer overflow in Windows BitLocker allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96864: Microsoft: Double free in Microsoft Failover Cluster Virtual Driver allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96852: Microsoft: Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96844: Microsoft: Integer underflow (wrap or wraparound) in Microsoft Bluetooth Driver allows an authorized attacker to elevate…	8.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96320: Microsoft: Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-96319: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96310: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96309: Microsoft: Use after free in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-96304: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96303: Microsoft: Improperly implemented security check for standard in Microsoft PowerShell allows an unauthorized attacker to bypass a…	6.5 Medium	N/A	N/A	Oct 13, 2026
CVE-2026-96301: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-96254: Microsoft: Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026

Rows per page

476-500 of 417606

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business