Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2024-12390: Improper Link Resolution Before File Access	8.8 High	N/A	2%	Mar 20, 2025
CVE-2024-11042: External Control of File Name or Path	9.1 Critical	N/A	2%	Mar 20, 2025
CVE-2024-10834: External Control of File Name or Path	9.1 Critical	N/A	1%	Mar 20, 2025
CVE-2024-10831: Absolute Path Traversal	9.1 Critical	N/A	1%	Mar 20, 2025
CVE-2025-30234: Use of Hard-coded Cryptographic Key	8.3 High	N/A	0%	Mar 19, 2025
CVE-2019-17659: Use of Hard-coded Credentials	3.7 Low	N/A	1%	Mar 17, 2025
CVE-2025-2277: Exposure of Sensitive Information to an Unauthorized Actor	7.5 High	N/A	1%	Mar 13, 2025
CVE-2025-0115: Improper Resolution of Path Equivalence	N/A	6.8 Medium	0%	Mar 12, 2025
CVE-2025-26701: Use of Default Password	10.0 Critical	N/A	0%	Mar 11, 2025
CVE-2025-27256: Missing Authentication for Critical Function	8.3 High	N/A	0%	Mar 10, 2025
CVE-2024-53458: Uncontrolled Resource Consumption	7.5 High	N/A	1%	Mar 5, 2025
CVE-2025-26466: Allocation of Resources Without Limits or Throttling	5.9 Medium	N/A	39%	Feb 28, 2025
CVE-2025-27414: Improper Authentication	N/A	4.6 Medium	1%	Feb 28, 2025
CVE-2025-22869: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	1%	Feb 26, 2025
CVE-2022-49335: NULL Pointer Dereference	5.5 Medium	N/A	0%	Feb 26, 2025
CVE-2025-26618: Memory Allocation with Excessive Size Value	N/A	7.0 High	0%	Feb 20, 2025
CVE-2025-20158: Exposure of Sensitive Information to an Unauthorized Actor	4.4 Medium	N/A	0%	Feb 19, 2025
CVE-2025-26465: Detection of Error Condition Without Action	6.8 Medium	N/A	8%	Feb 18, 2025
CVE-2024-4282: Use of a Broken or Risky Cryptographic Algorithm	9.8 Critical	8.2 High	0%	Feb 15, 2025
CVE-2024-57790: Use of Hard-coded Credentials	5.4 Medium	N/A	0%	Feb 14, 2025
CVE-2025-24888: Improper Limitation of a Pathname to a Restricted Directory	8.1 High	N/A	1%	Feb 13, 2025
CVE-2025-1100: Use of Hard-coded Password	9.8 Critical	N/A	1%	Feb 12, 2025
CVE-2025-1143: Use of Hard-coded Credentials	8.4 High	N/A	0%	Feb 11, 2025
CVE-2025-24366: Improper Neutralization of Special Elements used in an OS Command	7.5 High	N/A	1%	Feb 7, 2025
CVE-2024-47857: Improper Input Validation	9.8 Critical	N/A	0%	Jan 31, 2025

25 rows per page

826-850 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report