Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2025-55075: Hidden Functionality	4.9 Medium	6.9 Medium	0%	Sep 17, 2025
CVE-2025-48041: Allocation of Resources Without Limits or Throttling	N/A	7.1 High	0%	Sep 11, 2025
CVE-2025-48040: Uncontrolled Resource Consumption	N/A	6.9 Medium	0%	Sep 11, 2025
CVE-2025-48039: Allocation of Resources Without Limits or Throttling	N/A	5.3 Medium	0%	Sep 11, 2025
CVE-2025-48038: Allocation of Resources Without Limits or Throttling	N/A	5.3 Medium	0%	Sep 11, 2025
CVE-2025-20159: Improper Access Control	5.3 Medium	N/A	0%	Sep 10, 2025
CVE-2025-56413: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	1%	Sep 10, 2025
CVE-2025-9997: Improper Neutralization of Special Elements used in an OS Command	N/A	5.8 Medium	0%	Sep 9, 2025
CVE-2025-9996: Improper Neutralization of Special Elements used in an OS Command	N/A	5.8 Medium	1%	Sep 9, 2025
CVE-2025-8277: Missing Release of Memory after Effective Lifetime	3.1 Low	N/A	0%	Sep 9, 2025
CVE-2025-35451: Use of Hard-coded Credentials	9.8 Critical	9.3 Critical	1%	Sep 5, 2025
CVE-2025-58355: Improper Limitation of a Pathname to a Restricted Directory	7.7 High	N/A	0%	Sep 4, 2025
CVE-2025-47421: Improper Neutralization of Argument Delimiters in a Command	N/A	8.6 High	0%	Sep 3, 2025
CVE-2025-9817: NULL Pointer Dereference	7.5 High	N/A	0%	Sep 3, 2025
CVE-2025-9696: Use of Hard-coded Credentials	N/A	9.4 Critical	0%	Sep 2, 2025
CVE-2025-52548: Inclusion of Undocumented Features or Chicken Bits	4.9 Medium	6.9 Medium	0%	Sep 2, 2025
CVE-2025-9654: Improper Neutralization of Special Elements used in a Command	6.3 Medium	5.3 Medium	1%	Aug 29, 2025
CVE-2025-50753: Execution with Unnecessary Privileges	N/A	N/A	0%	Aug 26, 2025
CVE-2025-9358: Stack-based Buffer Overflow	8.8 High	7.4 High	1%	Aug 23, 2025
CVE-2025-38640: Undefined Security Weakness	7.8 High	N/A	0%	Aug 22, 2025
CVE-2025-4877: Out-of-bounds Write	4.5 Medium	N/A	0%	Aug 20, 2025
CVE-2025-36120: Incorrect Authorization	8.8 High	N/A	0%	Aug 18, 2025
CVE-2025-20265: Improper Neutralization of Special Elements in Output Used by a Downstream Component	10.0 Critical	N/A	16%	Aug 14, 2025
CVE-2012-10060: Stack-based Buffer Overflow	9.8 Critical	9.3 Critical	5%	Aug 13, 2025
CVE-2025-43982: Use of Hard-coded Credentials	9.8 Critical	N/A	0%	Aug 13, 2025

25 rows per page

726-750 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report