Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-99232: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99231: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: own the request before clearing…	7.8 High	N/A	N/A	Nov 2, 2026
CVE-2026-99230: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/cmd: don't leave list poison in…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99229: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/wait: don't spin on a stuck overflow list…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99228: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: don't lose the signal that ends…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99227: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: prevent cancel reference wrap…	7.8 High	N/A	N/A	Nov 2, 2026
CVE-2026-99226: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Avoid the owner account dereference in named…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99225: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Check the authorization payload in process…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99224: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Protect the type name while describing a key…	7.0 High	N/A	N/A	Nov 2, 2026
CVE-2026-99223: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: make keyring indexes independent of kernel…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99222: Linux: In the Linux kernel, the following vulnerability has been resolved: keys: Protect the read method check against type…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99221: Linux: In the Linux kernel, the following vulnerability has been resolved: keys/trusted_keys: return immediately after TPM…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99220: Linux: In the Linux kernel, the following vulnerability has been resolved: asymmetric_keys: reject trust keys without IDs The…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99219: Linux: In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-99218: Linux: In the Linux kernel, the following vulnerability has been resolved: coredump: hold RCU while releasing parked threads…	7.0 High	N/A	N/A	Nov 2, 2026
CVE-2026-99217: Linux: In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-88809: SUSE Rancher: A security vulnerability exists in the SUSE Rancher Manager meta proxy endpoint (/meta/proxy)	7.6 High	N/A	N/A	Nov 2, 2026
CVE-2026-120500: redimp otterwiki: An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that…	6.1 Medium	5.3 Medium	N/A	Nov 2, 2026
CVE-2026-77878: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…	8.4 High	8.6 High	N/A	Nov 2, 2026
CVE-2026-73696: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user…	9.1 Critical	9.3 Critical	N/A	Nov 2, 2026
CVE-2026-73695: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in…	8.8 High	8.7 High	N/A	Nov 2, 2026
CVE-2026-120492: Chainlit: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass…	5.4 Medium	6.3 Medium	N/A	Nov 2, 2026
CVE-2026-120489: Outline: Outline before 1.12.0 contains an incorrect authorization vulnerability in authorizeDocumentPublish() that allows…	4.3 Medium	5.3 Medium	N/A	Nov 2, 2026
CVE-2026-120488: LaraDashboard: LaraDashboard before 1.4.9 contains a stored cross-site scripting vulnerability that allows authenticated users with…	5.4 Medium	5.1 Medium	N/A	Nov 2, 2026
CVE-2026-120487: LaraDashboard: LaraDashboard before 1.4.5 contains an incorrect authorization vulnerability in SettingPolicy::manageCoreUpgrades()…	7.2 High	8.6 High	N/A	Nov 2, 2026

25 rows per page

51-75 of 574114

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business