Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-110858: Improper Neutralization of Argument Delimiters in a Command	8.1 High	9.2 Critical	0%	Oct 14, 2026
CVE-2026-100413: Use of Hard-coded Cryptographic Key	7.1 High	7.0 High	0%	Oct 14, 2026
CVE-2026-86002: Improper Neutralization of Directives in Dynamically Evaluated Code	9.0 Critical	N/A	1%	Oct 14, 2026
CVE-2026-73804: Incorrect Privilege Assignment	8.1 High	N/A	0%	Oct 14, 2026
CVE-2026-68964: Improper Access Control	4.3 Medium	N/A	0%	Oct 14, 2026
CVE-2026-110690: Relative Path Traversal	7.5 High	8.7 High	1%	Oct 14, 2026
CVE-2026-105429: Improper Neutralization of Special Elements used in an OS Command	8.0 High	8.9 High	1%	Oct 14, 2026
CVE-2026-97816: Use After Free	9.8 Critical	N/A	1%	Oct 13, 2026
CVE-2026-97811: Double Free	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-88157: Heap-based Buffer Overflow	8.8 High	N/A	1%	Oct 13, 2026
CVE-2026-83923: Relative Path Traversal	8.8 High	N/A	1%	Oct 13, 2026
CVE-2026-83871: Heap-based Buffer Overflow	7.0 High	N/A	0%	Oct 13, 2026
CVE-2026-83769: Use After Free	7.8 High	N/A	0%	Oct 13, 2026
CVE-2026-83754: Heap-based Buffer Overflow	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-70163: Allocation of Resources Without Limits or Throttling	7.5 High	N/A	1%	Oct 13, 2026
CVE-2026-110231: Improper Limitation of a Pathname to a Restricted Directory	4.7 Medium	5.6 Medium	0%	Oct 13, 2026
CVE-2026-54700: Improper Input Validation	N/A	6.9 Medium	0%	Oct 13, 2026
CVE-2026-54697: Integer Overflow or Wraparound	N/A	6.7 Medium	0%	Oct 13, 2026
CVE-2026-77375: Improper Validation of Array Index	6.5 Medium	N/A	0%	Oct 13, 2026
CVE-2026-109965: Improper Link Resolution Before File Access	7.1 High	8.4 High	0%	Oct 13, 2026
CVE-2026-109786: Improper Output Neutralization for Logs	5.3 Medium	N/A	0%	Oct 13, 2026
CVE-2026-105465: Improper Privilege Management	8.8 High	N/A	0%	Oct 12, 2026
CVE-2026-108523: Server-Side Request Forgery (SSRF)	4.3 Medium	2.1 Low	0%	Oct 11, 2026
CVE-2026-55797: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	2%	Oct 9, 2026
CVE-2026-84278: Improper Neutralization of Special Elements used in an OS Command	7.2 High	N/A	2%	Oct 8, 2026

25 rows per page

76-100 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report