Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-75015: Insufficiently Protected Credentials	4.9 Medium	N/A	0%	Sep 14, 2026
CVE-2026-73668: Incorrect Authorization	9.8 Critical	N/A	1%	Sep 14, 2026
CVE-2026-73579: Incorrect Authorization	9.8 Critical	N/A	1%	Sep 14, 2026
CVE-2026-73470: Improper Privilege Management	9.8 Critical	N/A	1%	Sep 14, 2026
CVE-2026-73178: Exposure of Sensitive Information to an Unauthorized Actor	7.5 High	N/A	0%	Sep 14, 2026
CVE-2026-87802: Improper Verification of Cryptographic Signature	9.1 Critical	N/A	0%	Sep 14, 2026
CVE-2026-87785: Authentication Bypass by Spoofing	9.1 Critical	N/A	1%	Sep 14, 2026
CVE-2026-87779: Insertion of Sensitive Information into Log File	7.5 High	N/A	0%	Sep 14, 2026
CVE-2026-86460: Improper Neutralization of Special Elements used in an SQL Command	9.8 Critical	N/A	1%	Sep 14, 2026
CVE-2026-82232: Improper Neutralization of Special Elements used in an SQL Command	9.8 Critical	N/A	1%	Sep 14, 2026
CVE-2026-72524: Incorrect Authorization	8.8 High	N/A	0%	Sep 14, 2026
CVE-2026-68570: Incorrect Authorization	6.5 Medium	N/A	0%	Sep 14, 2026
CVE-2026-82617: Inefficient Regular Expression Complexity	9.8 Critical	10.0 Critical	1%	Sep 11, 2026
CVE-2026-67211: Memory Allocation with Excessive Size Value	7.5 High	N/A	1%	Sep 11, 2026
CVE-2026-87859: Improper Output Neutralization for Logs	5.3 Medium	N/A	0%	Sep 11, 2026
CVE-2026-80354: Authorization Bypass Through User-Controlled Key	8.1 High	N/A	0%	Sep 10, 2026
CVE-2026-80352: Improper Control of Generation of Code	9.8 Critical	N/A	1%	Sep 10, 2026
CVE-2026-80351: Improper Neutralization of Directives in Dynamically Evaluated Code	9.8 Critical	N/A	1%	Sep 10, 2026
CVE-2026-84939: Relative Path Traversal	9.1 Critical	N/A	1%	Sep 10, 2026
CVE-2026-75880: Inefficient Regular Expression Complexity	6.5 Medium	N/A	1%	Sep 10, 2026
CVE-2026-67593: Missing Authentication for Critical Function	9.1 Critical	N/A	1%	Sep 10, 2026
CVE-2026-57822: Deserialization of Untrusted Data	6.5 Medium	N/A	1%	Sep 10, 2026
CVE-2026-49364: Missing Authentication for Critical Function	9.1 Critical	N/A	1%	Sep 10, 2026
CVE-2026-49363: Missing Authentication for Critical Function	7.5 High	N/A	1%	Sep 10, 2026
CVE-2026-49362: Missing Authentication for Critical Function	7.5 High	N/A	1%	Sep 10, 2026

Rows per page

526-550 of 4460

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business