Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-123998: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication bypass vulnerability in its…	8.3 High	7.2 High	N/A	Nov 6, 2026
CVE-2026-123997: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated denial-of-service vulnerability in the…	6.5 Medium	7.1 High	N/A	Nov 6, 2026
CVE-2026-123996: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains a missing authentication vulnerability in the UPnP/DLNA…	4.6 Medium	4.8 Medium	N/A	Nov 6, 2026
CVE-2026-123995: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an input validation vulnerability in the UPnP/DLNA…	4.6 Medium	4.8 Medium	N/A	Nov 6, 2026
CVE-2026-123994: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability in the DIAL…	6.3 Medium	5.3 Medium	N/A	Nov 6, 2026
CVE-2026-123993: Hisense VIDAA: Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated access vulnerability where a QA build of…	8.8 High	8.7 High	N/A	Nov 6, 2026
CVE-2026-123357: grobidOrg grobid: GROBID is machine learning software for extracting information from scholarly documents	0.0 None	N/A	N/A	Nov 6, 2026
CVE-2026-123356: grobidOrg grobid: GROBID is machine learning software for extracting information from scholarly documents	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-122113: Realtek RtUsbA64.sys: A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a physically present attacker using a maliciously…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-119923: AWS, Amazon: A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…	9.8 Critical	9.3 Critical	N/A	Nov 6, 2026
CVE-2026-10147: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-10146: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-108262: ddev: DDEV is an open-source tool for running local web development environments for PHP and Node.js	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-107155: SonicWall SonicOS: A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in…	8.8 High	N/A	N/A	Nov 6, 2026
CVE-2026-107154: SonicWall SonicOS: A session validation vulnerability has been identified in the SonicOS management interface, which in specific…	8.8 High	N/A	N/A	Nov 6, 2026
CVE-2026-100082: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-blkback: Avoid UAF when reading I/O statistics…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-100081: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: defer xenvif_mcast_addr_list_free() In…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-100080: Linux: In the Linux kernel, the following vulnerability has been resolved: xen-netback: Fix UAF when reading statistics data…	N/A	N/A	N/A	Nov 6, 2026
CVE-2025-64798: Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE…	N/A	N/A	N/A	Nov 6, 2026
CVE-2025-46896: Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE…	N/A	N/A	N/A	Nov 6, 2026
CVE-2024-36240: Rejected reason: Unused reservation with no CVE record; removed from tickets/pool during the 2026-11-06 stale-CVE…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-119924: AWS, Amazon: An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…	8.1 High	7.2 High	N/A	Nov 6, 2026
CVE-2026-123976: Teunis van Beelen EDFbrowser: EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to…	5.5 Medium	6.8 Medium	N/A	Nov 6, 2026
CVE-2026-62344: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-75598: GradleUp shadow: The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation	6.3 Medium	N/A	N/A	Nov 6, 2026

25 rows per page

51-75 of 425038

‹›

MDR Buyer's Guide

Global Threat Landscape Report