Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112858: axiomthemes Rhodos: Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112859: ThemeREX Group Little Birdies: Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-birdies allows Object…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112855: axiomthemes Redy: Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects…	9.8 Critical	N/A	N/A	Oct 23, 2026
CVE-2026-112863: Hogash KALLYAS: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hogash KALLYAS…	7.1 High	N/A	N/A	Oct 23, 2026
CVE-2026-115730: i18next i18next-http-backend: i18next-http-backend 4.0.2 contains an incomplete fix in interpolateUrl() that allows attackers to redirect translation…	3.1 Low	2.3 Low	N/A	Oct 23, 2026
CVE-2026-115729: pdfme common: @pdfme/common from 5.5.10 before 6.2.6 contains a server-side request forgery vulnerability that allows attackers to…	6.8 Medium	8.9 High	N/A	Oct 23, 2026
CVE-2026-115728: hapijs @hapi/content: @hapi/content from 6.0.1 before 6.0.3 contains a regular expression denial of service vulnerability in…	7.5 High	8.7 High	N/A	Oct 23, 2026
CVE-2026-99087: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99086: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99085: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99084: Linux: In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99083: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99082: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-55888: flatpak xdg-desktop-portal: XDG Desktop Portal is a desktop integration portal	N/A	8.8 High	N/A	Oct 23, 2026
CVE-2026-55889: flatpak xdg-desktop-portal: XDG Desktop Portal is a desktop integration portal	N/A	8.3 High	N/A	Oct 23, 2026
CVE-2026-57210: dadrus heimdall: Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service	N/A	7.0 High	N/A	Oct 23, 2026
CVE-2026-57209: dadrus heimdall: Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service	N/A	7.0 High	N/A	Oct 23, 2026
CVE-2026-55190: eventschedule: Event Schedule is an open-source platform to share events, sell tickets and bring communities together	6.5 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-99081: Linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99080: Linux: In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode()…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99079: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99078: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99077: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99076: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-99075: Linux: In the Linux kernel, the following vulnerability has been resolved: rust_binder: reschedule node refcount update on…	N/A	N/A	N/A	Oct 23, 2026

Rows per page

51-75 of 545063

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business