Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-110826: team-alembic ash_authentication: Improper Session Invalidation after Authentication Credential Change vulnerability in team-alembic ash_authentication…	N/A	6.3 Medium	N/A	Nov 3, 2026
CVE-2026-63471: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI files	N/A	9.3 Critical	N/A	Nov 3, 2026
CVE-2026-82976: Red Hat: A flaw was found in the image-customization-controller used in OpenShift's bare metal provisioning stack	7.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-63417: armurox loggingredactor: Logging Redactor is a Python library designed to redact sensitive data in logs based on regex patterns and / or…	N/A	8.2 High	N/A	Nov 3, 2026
CVE-2026-63197: traPtitech traQ: traQ is a messenger application built for Digital Creators Club traP	7.3 High	N/A	N/A	Nov 3, 2026
CVE-2026-57154: opnsense core: OPNsense is a FreeBSD based firewall and routing platform	8.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-46487: geonetwork core-geonetwork: GeoNetwork is a catalog application to manage spatially referenced resources	7.5 High	N/A	N/A	Nov 3, 2026
CVE-2026-39379: geonetwork core-geonetwork: GeoNetwork is a catalog application to manage spatially referenced resources	7.1 High	N/A	N/A	Nov 3, 2026
CVE-2026-121652: AWS maplibre-gl-js-amplify: Cross-site scripting (XSS) issue in AWS Amplify maplibre-gl-js-amplify before 4.0.3 might allow remote authenticated…	5.4 Medium	4.8 Medium	N/A	Nov 3, 2026
CVE-2026-121501: mathurvishal CloudClassroom-PHP-Project: A vulnerability was determined in mathurvishal CloudClassroom-PHP-Project	6.3 Medium	2.1 Low	N/A	Nov 3, 2026
CVE-2026-120956: MongoDB C Driver: The MongoDB C Driver does not validate the type or format of a namespace field returned by the server in a query…	7.1 High	7.1 High	N/A	Nov 3, 2026
CVE-2026-120955: MongoDB C Driver: The GridFS file download API in the MongoDB C Driver does not check the result of an internal operation under certain…	7.5 High	8.7 High	N/A	Nov 3, 2026
CVE-2026-120678: MongoDB C Driver: A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to…	7.5 High	8.7 High	N/A	Nov 3, 2026
CVE-2026-120673: MongoDB Rust Driver: A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before…	5.5 Medium	6.8 Medium	N/A	Nov 3, 2026
CVE-2026-119922: AWS babelfish-for-postgresql: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8,…	8.8 High	8.7 High	N/A	Nov 3, 2026
CVE-2026-112917: Docker Docker Desktop: In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to…	N/A	9.2 Critical	N/A	Nov 3, 2026
CVE-2026-63469: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI files	N/A	9.3 Critical	N/A	Nov 3, 2026
CVE-2026-63470: koxudaxi fastapi-code-generator: fastapi-code-generator creates FastAPI applications from OpenAPI files	N/A	9.3 Critical	N/A	Nov 3, 2026
CVE-2026-120953: MongoDB Atlas SQL JDBC Driver: A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver	4.3 Medium	5.1 Medium	N/A	Nov 3, 2026
CVE-2026-120954: MongoDB C Driver: A weakness in the BSON library's handling of a specialized binary vector data type allows an arithmetic wraparound when…	3.7 Low	6.3 Medium	N/A	Nov 3, 2026
CVE-2026-121382: Netcore NBR100V2: A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928	7.5 High	7.7 High	N/A	Nov 3, 2026
CVE-2026-120684: MongoDB C Driver: A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process…	6.5 Medium	6.0 Medium	N/A	Nov 3, 2026
CVE-2026-63198: traPtitech traQ: traQ is a messenger application built for Digital Creators Club traP	7.3 High	N/A	N/A	Nov 3, 2026
CVE-2026-63418: monitoring-plugins: Monitoring Plugins is a suite of plugins for monitoring applications	7.0 High	N/A	N/A	Nov 3, 2026
CVE-2026-63499: zeroturnaround zt-zip: zt-zip is a Java library that provides convenience methods for ZIP archive manipulation	N/A	6.9 Medium	N/A	Nov 3, 2026

25 rows per page

76-100 of 528356

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business