Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-62346: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures	7.6 High	N/A	N/A	Nov 6, 2026
CVE-2026-62345: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures	7.6 High	N/A	N/A	Nov 6, 2026
CVE-2026-56717: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-49126: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-49125: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-49124: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-49123: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-49122: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-47404: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-47403: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-47402: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-47401: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-47400: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-19868: SonicWall SonicOS: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an…	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-19703: SonicWall SonicOS: A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…	5.1 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-123998: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its…	8.3 High	7.2 High	N/A	Nov 6, 2026
CVE-2026-123997: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the…	6.5 Medium	7.1 High	N/A	Nov 6, 2026
CVE-2026-123996: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA…	4.6 Medium	4.8 Medium	N/A	Nov 6, 2026
CVE-2026-123995: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA…	4.6 Medium	4.8 Medium	N/A	Nov 6, 2026
CVE-2026-123994: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability in the DIAL…	6.3 Medium	5.3 Medium	N/A	Nov 6, 2026
CVE-2026-123993: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of…	8.8 High	8.7 High	N/A	Nov 6, 2026
CVE-2026-123356: grobidOrg grobid: GROBID is machine learning software for extracting information from scholarly documents	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-122113: Realtek RtUsbA64.sys: A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-119924: AWS, Amazon: An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…	8.1 High	7.2 High	N/A	Nov 6, 2026
CVE-2026-119923: AWS, Amazon: A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…	9.8 Critical	9.3 Critical	N/A	Nov 6, 2026

25 rows per page

551-575 of 416926

‹›

MDR Buyer's Guide

Global Threat Landscape Report