Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-25244: Improper Neutralization of Special Elements used in an OS Command	9.8 Critical	N/A	3%	May 18, 2026
CVE-2026-39079: Exposure of Sensitive Information to an Unauthorized Actor	7.5 High	N/A	0%	May 18, 2026
CVE-2026-45037: Incomplete List of Disallowed Inputs	7.1 High	N/A	0%	May 15, 2026
CVE-2026-44426: Authorization Bypass Through User-Controlled Key	6.5 Medium	N/A	0%	May 13, 2026
CVE-2026-44425: Improper Input Validation	5.4 Medium	N/A	0%	May 13, 2026
CVE-2026-44424: Authorization Bypass Through User-Controlled Key	6.5 Medium	N/A	0%	May 13, 2026
CVE-2026-44423: Authorization Bypass Through User-Controlled Key	6.5 Medium	N/A	0%	May 13, 2026
CVE-2026-44467: Improper Validation of Certificate with Host Mismatch	6.8 Medium	7.4 High	0%	May 13, 2026
CVE-2026-28758: Cleartext Storage of Sensitive Information	4.4 Medium	6.7 Medium	0%	May 13, 2026
CVE-2026-44347: Cross-Site Request Forgery (CSRF)	6.5 Medium	N/A	0%	May 12, 2026
CVE-2026-44225: Improper Limitation of a Pathname to a Restricted Directory	9.3 Critical	N/A	2%	May 12, 2026
CVE-2026-1185: Incorrect Permission Assignment for Critical Resource	8.8 High	N/A	0%	May 12, 2026
CVE-2026-41489: Incorrect Permission Assignment for Critical Resource	8.8 High	N/A	0%	May 11, 2026
CVE-2026-42454: Improper Neutralization of Special Elements used in an OS Command	9.9 Critical	N/A	1%	May 8, 2026
CVE-2026-42453: Improper Neutralization of Special Elements used in a Command	N/A	8.7 High	1%	May 8, 2026
CVE-2026-42452: Missing Critical Step in Authentication	8.1 High	N/A	0%	May 8, 2026
CVE-2026-42189: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	0%	May 8, 2026
CVE-2026-43944: Improper Input Validation	9.6 Critical	9.4 Critical	0%	May 8, 2026
CVE-2026-43943: Improper Neutralization of Special Elements used in an OS Command	7.8 High	N/A	0%	May 8, 2026
CVE-2026-43942: Exposure of Sensitive Information to an Unauthorized Actor	5.5 Medium	N/A	0%	May 8, 2026
CVE-2026-43941: Improper Neutralization of Argument Delimiters in a Command	9.6 Critical	N/A	0%	May 8, 2026
CVE-2026-43940: Improper Limitation of a Pathname to a Restricted Directory	8.4 High	N/A	0%	May 8, 2026
CVE-2026-41501: Improper Neutralization of Special Elements used in a Command	9.8 Critical	N/A	1%	May 8, 2026
CVE-2026-41500: Improper Neutralization of Special Elements used in a Command	9.8 Critical	N/A	2%	May 8, 2026
CVE-2026-41589: Improper Limitation of a Pathname to a Restricted Directory	9.6 Critical	N/A	0%	May 7, 2026

25 rows per page

501-525 of 2136

‹›

MDR Buyer's Guide

Global Threat Landscape Report