Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2020-37136: Stack-based Buffer Overflow	7.5 High	6.7 Medium	0%	Feb 5, 2026
CVE-2026-25539: Improper Limitation of a Pathname to a Restricted Directory	9.1 Critical	N/A	1%	Feb 4, 2026
CVE-2026-25499: Initialization of a Resource with an Insecure Default	7.5 High	8.7 High	0%	Feb 4, 2026
CVE-2026-25157: Improper Neutralization of Special Elements used in an OS Command	7.7 High	N/A	1%	Feb 4, 2026
CVE-2026-25055: Improper Limitation of a Pathname to a Restricted Directory	8.1 High	7.1 High	2%	Feb 4, 2026
CVE-2026-1803: Use of Default Credentials	8.1 High	8.2 High	1%	Feb 3, 2026
CVE-2025-62501: Key Exchange without Entity Authentication	N/A	7.0 High	1%	Feb 3, 2026
CVE-2024-5986: External Control of File Name or Path	9.1 Critical	N/A	1%	Feb 2, 2026
CVE-2026-24123: Improper Limitation of a Pathname to a Restricted Directory	7.4 High	N/A	0%	Jan 26, 2026
CVE-2026-24056: Improper Limitation of a Pathname to a Restricted Directory	6.5 Medium	6.7 Medium	1%	Jan 26, 2026
CVE-2025-59105: Cleartext Storage of Sensitive Information	N/A	7.0 High	0%	Jan 26, 2026
CVE-2025-59103: Use of Weak Credentials	N/A	9.2 Critical	0%	Jan 26, 2026
CVE-2026-24058: Authentication Bypass by Alternate Name	9.8 Critical	8.1 High	1%	Jan 22, 2026
CVE-2026-1324: Improper Neutralization of Special Elements used in an OS Command	8.8 High	7.4 High	7%	Jan 22, 2026
CVE-2026-1102: Allocation of Resources Without Limits or Throttling	5.3 Medium	N/A	1%	Jan 22, 2026
CVE-2026-24049: Improper Limitation of a Pathname to a Restricted Directory	7.1 High	N/A	0%	Jan 22, 2026
CVE-2021-47871: External Control of File Name or Path	8.8 High	8.6 High	1%	Jan 21, 2026
CVE-2026-20080: Uncontrolled Resource Consumption	5.3 Medium	N/A	0%	Jan 21, 2026
CVE-2025-40679: Improper Neutralization of Input During Web Page Generation	N/A	5.1 Medium	0%	Jan 20, 2026
CVE-2021-47827: Improper Validation of Specified Quantity in Input	7.5 High	4.6 Medium	0%	Jan 16, 2026
CVE-2021-47769: Improper Neutralization of Input During Web Page Generation	4.8 Medium	5.1 Medium	0%	Jan 15, 2026
CVE-2021-47759: Insufficiently Protected Credentials	6.2 Medium	6.8 Medium	0%	Jan 15, 2026
CVE-2025-71093: Out-of-bounds Read	7.1 High	N/A	0%	Jan 13, 2026
CVE-2025-12548: Missing Authentication for Critical Function	9.0 Critical	N/A	1%	Jan 13, 2026
CVE-2024-54855: Use of Hard-coded Cryptographic Key	6.4 Medium	N/A	0%	Jan 13, 2026

25 rows per page

626-650 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report