Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-121031: Missing Authorization	N/A	N/A	0%	Nov 3, 2026
CVE-2026-121030: Incorrect Authorization	9.6 Critical	N/A	0%	Nov 3, 2026
CVE-2026-121029: Incorrect Authorization	N/A	N/A	0%	Nov 3, 2026
CVE-2026-120959: Out-of-bounds Write	3.7 Low	2.1 Low	0%	Nov 3, 2026
CVE-2026-120952: Out-of-bounds Write	7.1 High	6.0 Medium	0%	Nov 3, 2026
CVE-2026-120734: Cleartext Transmission of Sensitive Information	N/A	N/A	0%	Nov 3, 2026
CVE-2026-120733: Cleartext Storage of Sensitive Information	N/A	N/A	0%	Nov 3, 2026
CVE-2026-120716: Insertion of Sensitive Information Into Sent Data	N/A	N/A	0%	Nov 3, 2026
CVE-2026-120715: Server-Side Request Forgery (SSRF)	N/A	N/A	0%	Nov 3, 2026
CVE-2026-119636: Missing Release of Resource after Effective Lifetime	N/A	N/A	0%	Nov 3, 2026
CVE-2026-115878: Improper Control of Generation of Code	7.8 High	N/A	1%	Nov 3, 2026
CVE-2026-115779: Improper Neutralization of Special Elements in Output Used by a Downstream Component	N/A	6.3 Medium	1%	Nov 3, 2026
CVE-2026-115732: Incorrect Authorization	N/A	9.0 Critical	1%	Nov 3, 2026
CVE-2026-115731: Deserialization of Untrusted Data	N/A	9.4 Critical	0%	Nov 3, 2026
CVE-2026-111754: URL Redirection to Untrusted Site	N/A	5.1 Medium	1%	Nov 3, 2026
CVE-2026-111752: Uncontrolled Resource Consumption	N/A	8.2 High	1%	Nov 3, 2026
CVE-2026-111751: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…	N/A	8.2 High	1%	Nov 3, 2026
CVE-2026-95777: Undefined Security Weakness	3.1 Low	N/A	0%	Nov 3, 2026
CVE-2026-95776: Undefined Security Weakness	3.1 Low	N/A	0%	Nov 3, 2026
CVE-2026-95775: Undefined Security Weakness	3.3 Low	N/A	0%	Nov 3, 2026
CVE-2026-95774: Undefined Security Weakness	3.7 Low	N/A	0%	Nov 3, 2026
CVE-2026-95773: Undefined Security Weakness	3.8 Low	N/A	0%	Nov 3, 2026
CVE-2026-95772: Undefined Security Weakness	4.2 Medium	N/A	0%	Nov 3, 2026
CVE-2026-95771: Undefined Security Weakness	4.3 Medium	N/A	0%	Nov 3, 2026
CVE-2026-95770: Undefined Security Weakness	4.7 Medium	N/A	0%	Nov 3, 2026

25 rows per page

551-575 of 540025

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business