Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-115887: graphql-hive graphql-scalars: GraphQL Scalars is a library of custom GraphQL scalars for creating precise type-safe GraphQL schemas	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-115886: mlflow: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models	6.5 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-115885: langchain-ai langgraph: The LangGraph CLI is the official command-line interface for LangGraph	N/A	4.1 Medium	N/A	Oct 23, 2026
CVE-2026-115883: langchain-ai: LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents	N/A	6.0 Medium	N/A	Oct 23, 2026
CVE-2026-115801: Kakao khaiii: A security flaw has been discovered in Kakao khaiii up to 0.4	5.3 Medium	1.9 Low	N/A	Oct 23, 2026
CVE-2026-83813: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	3.1 Low	N/A	N/A	Oct 23, 2026
CVE-2026-75525: open-reception appointment-booking-software: OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform	5.3 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-75524: open-reception appointment-booking-software: OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform	5.4 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-65825: open-reception appointment-booking-software: OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-65824: open-reception appointment-booking-software: OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform	7.4 High	N/A	N/A	Oct 23, 2026
CVE-2026-58202: open-reception appointment-booking-software: OpenReception's appointment booking software provides an end-to-end encrypted appointment booking platform	8.3 High	N/A	N/A	Oct 23, 2026
CVE-2026-57849: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-115877: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	5.4 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-115800: UbiquitousLearning mllm: A vulnerability was identified in UbiquitousLearning mllm up to 2.0.2	5.3 Medium	1.9 Low	N/A	Oct 23, 2026
CVE-2026-115778: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-115776: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	7.5 High	N/A	N/A	Oct 23, 2026
CVE-2026-115775: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	N/A	8.7 High	N/A	Oct 23, 2026
CVE-2026-115774: twisted: Twisted is an event-based framework for internet applications, supporting Python 3.6+	4.9 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-113951: Apple Container: If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential…	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-113877: Executable Regular Expression Error	N/A	N/A	N/A	Oct 23, 2026
CVE-2026-115586: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	N/A	7.1 High	N/A	Oct 23, 2026
CVE-2026-115797: Tenda F6: A weakness has been identified in Tenda F6 12.02.01.73	3.7 Low	2.9 Low	N/A	Oct 23, 2026
CVE-2026-79982: zephyrproject zephyr: The Bluetooth HCI USB transport class of the new USB device stack, subsys/usb/device_next/class/bt_hci.c, copies every…	8.8 High	N/A	N/A	Oct 23, 2026
CVE-2026-79981: zephyrproject zephyr: The DNS stub resolver in subsys/net/lib/dns/resolve.c binds one UDP socket per configured server when the resolver…	6.5 Medium	N/A	N/A	Oct 23, 2026
CVE-2026-79980: zephyrproject zephyr: The DHCPv4 client in subsys/net/lib/dhcpv4/dhcpv4.c maintained its transaction identifier (iface->config.dhcpv4.xid) as…	5.6 Medium	N/A	N/A	Oct 23, 2026

Rows per page

76-100 of 530113

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business