Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-26213: Improper Neutralization of Special Elements used in an OS Command	9.8 Critical	8.7 High	5%	Mar 26, 2026
CVE-2026-32846: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	8.7 High	1%	Mar 26, 2026
CVE-2026-33724: Authorization Bypass Through User-Controlled Key	7.4 High	6.3 Medium	0%	Mar 25, 2026
CVE-2026-20083: Improper Handling of Extra Parameters	6.5 Medium	N/A	0%	Mar 25, 2026
CVE-2026-4433: Undefined Security Weakness	4.3 Medium	1.9 Low	0%	Mar 24, 2026
CVE-2026-33353: Exposure of Sensitive Information to an Unauthorized Actor	6.5 Medium	7.1 High	0%	Mar 24, 2026
CVE-2026-30932: Improper Neutralization of Special Elements in Output Used by a Downstream Component	8.8 High	8.6 High	1%	Mar 24, 2026
CVE-2026-24516: Improper Control of Generation of Code	8.8 High	N/A	3%	Mar 23, 2026
CVE-2019-25607: Out-of-bounds Write	8.4 High	8.6 High	0%	Mar 22, 2026
CVE-2019-25590: Assumed-Immutable Data is Stored in Writable Memory	6.2 Medium	6.9 Medium	0%	Mar 22, 2026
CVE-2026-4115: Improper Verification of Cryptographic Signature	3.7 Low	2.9 Low	1%	Mar 22, 2026
CVE-2026-4541: Improper Verification of Cryptographic Signature	2.5 Low	1.1 Low	0%	Mar 22, 2026
CVE-2026-3554: Improper Neutralization of Input During Web Page Generation	6.4 Medium	N/A	0%	Mar 21, 2026
CVE-2026-32733: Improper Limitation of a Pathname to a Restricted Directory	6.5 Medium	8.7 High	0%	Mar 20, 2026
CVE-2026-32771: Improper Limitation of a Pathname to a Restricted Directory	9.8 Critical	8.8 High	1%	Mar 20, 2026
CVE-2026-22321: Stack-based Buffer Overflow	5.3 Medium	N/A	0%	Mar 18, 2026
CVE-2026-22320: Stack-based Buffer Overflow	6.5 Medium	N/A	0%	Mar 18, 2026
CVE-2026-28500: Insufficient Verification of Data Authenticity	9.1 Critical	N/A	0%	Mar 18, 2026
CVE-2026-23759: Improper Neutralization of Special Elements used in an OS Command	7.2 High	8.6 High	2%	Mar 17, 2026
CVE-2026-23943: Improper Handling of Highly Compressed Data (Data Amplification)	5.3 Medium	6.9 Medium	1%	Mar 13, 2026
CVE-2026-23942: Improper Limitation of a Pathname to a Restricted Directory	5.4 Medium	5.3 Medium	0%	Mar 13, 2026
CVE-2026-3497: Use of Uninitialized Resource	7.5 High	6.9 Medium	2%	Mar 12, 2026
CVE-2026-32116: Improper Limitation of a Pathname to a Restricted Directory	8.1 High	8.2 High	0%	Mar 12, 2026
CVE-2026-21670: Insufficiently Protected Credentials	7.7 High	N/A	0%	Mar 12, 2026
CVE-2025-67035: Improper Neutralization of Special Elements used in an OS Command	7.2 High	8.6 High	0%	Mar 11, 2026

25 rows per page

576-600 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report