Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-83935: Microsoft: Heap-based buffer overflow in Microsoft XML allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-83930: Microsoft: Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83926: Microsoft: Improper certificate validation in Windows Hello allows an authorized attacker to bypass a security feature locally.	4.4 Medium	N/A	N/A	Oct 13, 2026
CVE-2026-83911: Microsoft: Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83906: Microsoft: Incorrect implementation of authentication algorithm in Windows Shell allows an unauthorized attacker to perform…	6.5 Medium	N/A	N/A	Oct 13, 2026
CVE-2026-83901: Microsoft: Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83886: Microsoft: Use after free in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83885: Microsoft: Inadequate encryption strength in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to…	5.6 Medium	N/A	N/A	Oct 13, 2026
CVE-2026-83883: Microsoft: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-83872: Microsoft: Incorrect conversion between numeric types in Windows TCP/IP allows an authorized attacker to elevate privileges…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-83869: Microsoft: Integer underflow (wrap or wraparound) in DNS Server allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-83868: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Bluetooth…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83866: Microsoft: Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83862: Microsoft: Use after free in Windows Network Load Balancing allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-83857: Microsoft: Use after free in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to elevate…	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-83847: Microsoft: Heap-based buffer overflow in Microsoft Account allows an authorized attacker to elevate privileges locally.	7.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-83846: Microsoft: Use after free in Connected Devices Platform Service (Cdpsvc) allows an authorized attacker to elevate privileges…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83845: Microsoft: Improper privilege management in Windows Internet (wininet.dll) allows an authorized attacker to perform spoofing…	8.4 High	N/A	N/A	Oct 13, 2026
CVE-2026-83842: Microsoft: Double free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83841: Microsoft: Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83793: Microsoft: Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an…	7.0 High	N/A	N/A	Oct 13, 2026
CVE-2026-83782: Microsoft: Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-83748: Microsoft: Heap-based buffer overflow in Windows Error Reporting allows an unauthorized attacker to execute code over a network.	9.8 Critical	N/A	N/A	Oct 13, 2026
CVE-2026-83728: Microsoft: Improper validation of syntactic correctness of input in Windows Hyper-V allows an authorized attacker to perform…	8.8 High	N/A	N/A	Oct 13, 2026
CVE-2026-83694: Microsoft: Out-of-bounds read in Windows Volume Manager Extension Driver allows an authorized attacker to elevate privileges…	7.0 High	N/A	N/A	Oct 13, 2026

Rows per page

576-600 of 417606

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business