Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-106141: Progress Software Kendo UI for Angular: Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-106136: Progress Software KendoReact: Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-react-conversational-ui) in Progress Software…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-106135: Progress Software Kendo UI for Angular: Cross-Site Scripting (XSS) in the Chat component (@progress/kendo-angular-conversational-ui) in Progress Software Kendo…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-106134: Progress Software KendoReact: Cross-Site Scripting (XSS) in the Menu component (@progress/kendo-react-layout) in Progress Software KendoReact…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-106128: Progress Software Kendo UI for Vue: Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0…	4.1 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-106127: Progress Software KendoReact: Prototype Pollution in the setter utility (@progress/kendo-react-common) in Progress Software KendoReact versions 3.5.0…	4.1 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-104657: Progress Software Fiddler Download & Setup Skill: Missing integrity verification in the Progress Software Fiddler Download and Setup Skill on Linux, macOS, and Windows…	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-104656: Progress Software Progress® Telerik® Fiddler® Everywhere: Improper neutralization of input in the sessions grid in Progress Telerik Fiddler Everywhere 8.3.0 and earlier allows…	7.3 High	N/A	N/A	Nov 6, 2026
CVE-2026-85742: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-123748: chenyme grok2api: A security flaw has been discovered in chenyme grok2api up to 3.1.6	4.3 Medium	5.3 Medium	N/A	Nov 6, 2026
CVE-2026-103985: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.1 High	N/A	N/A	Nov 6, 2026
CVE-2026-103984: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-85743: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	8.2 High	N/A	N/A	Nov 6, 2026
CVE-2026-85744: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62850: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	5.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62852: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62855: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	4.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62851: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	4.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62856: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox application	7.7 High	N/A	N/A	Nov 6, 2026
CVE-2026-62854: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.6 High	N/A	N/A	Nov 6, 2026
CVE-2026-90436: Apache Software Foundation Apache Axis 1.x (EOL): UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80303: Gen Digital: An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80302: Gen Digital: Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80301: Gen Digital: Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-66987: HCL Software HCL AION: HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated…	5.3 Medium	N/A	N/A	Nov 6, 2026

25 rows per page

626-650 of 425038

‹›

MDR Buyer's Guide

Global Threat Landscape Report