Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-110070: Unknown Modern Events Calendar Lite: The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the…	6.5 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-110069: Unknown Modern Events Calendar Lite: The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks…	4.3 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-110035: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not restrict one of its REST API endpoints to salon…	4.3 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-110033: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not validate a user-supplied image URL before fetching…	6.8 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-110032: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not restrict which user account its salon staff roles…	5.5 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-110031: Unknown Salon Booking System: The Salon Booking System WordPress plugin before 10.31.11 does not prevent users holding its custom salon staff role…	7.2 High	N/A	N/A	Oct 18, 2026
CVE-2026-110026: Unknown Tasty Recipes Lite: The Tasty Recipes Lite WordPress plugin before 1.2.11 does not correctly check user capabilities when creating,…	4.9 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-109937: Unknown Otter Blocks: The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site…	5.4 Medium	N/A	N/A	Oct 18, 2026
CVE-2026-111876: alexpasmantier television: A vulnerability was found in alexpasmantier television up to 0.15.9	5.3 Medium	1.9 Low	N/A	Oct 18, 2026
CVE-2026-111875: David-Crty Databasement: A vulnerability has been found in David-Crty Databasement up to 1.8.1	4.7 Medium	2.0 Low	N/A	Oct 18, 2026
CVE-2026-111874: n/a OpenCATS: A flaw has been found in OpenCATS 0.10.0	3.7 Low	2.9 Low	N/A	Oct 18, 2026
CVE-2026-111873: itsmeravitejak Online-Examination-System: A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449	7.3 High	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111872: itsmeravitejak Online-Examination-System: A security vulnerability has been detected in itsmeravitejak Online-Examination-System up to…	7.3 High	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111871: itsmeravitejak Online-Examination-System: A weakness has been identified in itsmeravitejak Online-Examination-System up to…	7.3 High	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111870: itsmeravitejak Online-Examination-System: A security flaw has been discovered in itsmeravitejak Online-Examination-System up to…	5.3 Medium	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111869: makeplane plane: A vulnerability was identified in makeplane plane up to 1.4.2	5.3 Medium	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-111997: beaugunderson ip-address: ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall)…	N/A	6.3 Medium	N/A	Oct 18, 2026
CVE-2026-111868: datastax pulsar-jms: A vulnerability was determined in datastax pulsar-jms up to 9.0.3	6.3 Medium	2.1 Low	N/A	Oct 18, 2026
CVE-2026-111866: nemoTyrant manong: A weakness has been identified in nemoTyrant manong up to 7c9e5228e133b9267ad3a415833bc9bb53193bb4	7.3 High	6.9 Medium	N/A	Oct 17, 2026
CVE-2026-108117: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 17, 2026
CVE-2026-107772: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 17, 2026
CVE-2026-107345: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 17, 2026
CVE-2026-107274: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 17, 2026
CVE-2026-105391: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 17, 2026
CVE-2026-111865: THU-MIG yoloe: A security flaw has been discovered in THU-MIG yoloe up to 40cd606cabdbe2b566d6f14a6b162c89206e9a1b	5.3 Medium	1.9 Low	N/A	Oct 17, 2026

Rows per page

526-550 of 406803

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business