Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-49407: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	7.7 High	N/A	N/A	Nov 5, 2026
CVE-2026-54142: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	8.7 High	N/A	N/A	Nov 5, 2026
CVE-2026-54146: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	8.8 High	N/A	N/A	Nov 5, 2026
CVE-2026-54143: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	9.8 Critical	N/A	N/A	Nov 5, 2026
CVE-2026-54141: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	9.0 Critical	N/A	N/A	Nov 5, 2026
CVE-2026-119083: AWS gluonts: Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted…	7.8 High	8.4 High	N/A	Nov 5, 2026
CVE-2026-49393: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	8.4 High	N/A	N/A	Nov 5, 2026
CVE-2026-54145: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	8.8 High	N/A	N/A	Nov 5, 2026
CVE-2026-49405: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	6.2 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-111253: Red Hat Red Hat Hardened Images: A flaw was found in dnf5daemon-server	6.6 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-118517: sensiolabs symfony: The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts()…	N/A	2.3 Low	N/A	Nov 5, 2026
CVE-2026-54144: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	6.1 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-54140: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library	8.3 High	N/A	N/A	Nov 5, 2026
CVE-2026-102739: francescopace espectre: ESPectre is a Wi-Fi motion sensing platform for ESP32	7.8 High	N/A	N/A	Nov 5, 2026
CVE-2026-123151: Red Hat: A flaw was found in the GNU debugger (GDB)	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-121997: Red Hat: A heap buffer overflow in gdbserver's QTDPsrc packet handler allows an unauthenticated remote attacker to achieve…	8.1 High	N/A	N/A	Nov 5, 2026
CVE-2026-121996: Red Hat: A length validation flaw in gdbserver's agent-expression parser allows an unauthenticated remote attacker to read…	8.2 High	N/A	N/A	Nov 5, 2026
CVE-2026-121995: Red Hat: A stack buffer overflow in the GDB client's tracepoint upload handler allows an attacker-controlled debug stub to…	7.5 High	N/A	N/A	Nov 5, 2026
CVE-2026-121994: Red Hat: A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to…	8.8 High	N/A	N/A	Nov 5, 2026
CVE-2026-97371: ntop ntopng: ntopng is a web-based network traffic monitoring application	5.3 Medium	N/A	N/A	Nov 5, 2026
CVE-2026-114232: Red Hat: A flaw was found in the UserManagedPermissionService of the Keycloak authorization server	8.1 High	N/A	N/A	Nov 5, 2026
CVE-2026-112208: Red Hat: A flaw was found in the Organization identity-first login flow of the Keycloak authentication server	8.1 High	N/A	N/A	Nov 5, 2026
CVE-2026-110932: Red Hat: A flaw was found in the theme resource endpoint of Keycloak, an open-source identity and access management solution	7.5 High	N/A	N/A	Nov 5, 2026
CVE-2026-110931: Red Hat: A flaw was found in the SAML 1.1 assertion parser of Keycloak, a tool used for identity and access management	7.5 High	N/A	N/A	Nov 5, 2026
CVE-2026-107602: Red Hat: A flaw was found in the SAML 1.1 XML parsing logic of Keycloak, an open-source identity and access management solution	7.5 High	N/A	N/A	Nov 5, 2026

25 rows per page

76-100 of 423114

‹›

MDR Buyer's Guide

Global Threat Landscape Report