Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-80463: Apache Software Foundation Apache bRPC: Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-79704: Apache Software Foundation Apache bRPC: An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0)…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-78334: Apache Software Foundation Apache bRPC: Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-78066: Apache Software Foundation Apache bRPC: Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-78058: Apache Software Foundation Apache bRPC: Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-78048: Apache Software Foundation Apache bRPC: A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-74758: Apache Software Foundation Apache bRPC: A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-74757: Apache Software Foundation Apache bRPC: Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-74755: Apache Software Foundation Apache bRPC: An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-66392: Apache Software Foundation Apache bRPC: Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled,…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-61916: Apache Software Foundation Apache bRPC: Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-61902: Apache Software Foundation Apache bRPC: Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-59562: Apache Software Foundation Apache IoTDB: Missing authentication for critical function vulnerability in Apache IoTDB	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-59229: Apache Software Foundation Apache IoTDB: The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-58064: Apache Software Foundation Apache bRPC: The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-56388: Apache Software Foundation Apache bRPC: The Redis server command parser in Apache bRPC accepts an empty RESP array as a command header	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-56387: Apache Software Foundation Apache bRPC: The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted input	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-56386: Apache Software Foundation Apache bRPC: Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an…	7.5 High	N/A	N/A	Oct 21, 2026
CVE-2026-54427: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-54426: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-54425: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-48830: Apache Software Foundation Apache bRPC: Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication…	N/A	N/A	N/A	Oct 21, 2026
CVE-2026-114242: dhikshitha29 Insurance-Management-System: A vulnerability was identified in dhikshitha29 Insurance-Management-System…	7.3 High	5.5 Medium	N/A	Oct 21, 2026
CVE-2026-87096: Acronis Acronis Cyber Infrastructure: Sensitive information disclosure and manipulation due to improper authorization checks	3.3 Low	N/A	N/A	Oct 21, 2026
CVE-2026-87095: Acronis Acronis Cyber Infrastructure: Sensitive information disclosure and manipulation due to improper authorization checks	9.1 Critical	N/A	N/A	Oct 21, 2026

Rows per page

576-600 of 414140

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business