Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-59970: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists	7.7 High	N/A	N/A	Oct 16, 2026
CVE-2026-59966: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists	5.7 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-59963: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists	7.1 High	N/A	N/A	Oct 16, 2026
CVE-2026-30971: zoneminder: ZoneMinder is a free, open source closed-circuit television software application	8.8 High	N/A	N/A	Oct 16, 2026
CVE-2026-108743: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Kylin	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-108709: Apache Software Foundation Apache Kylin: Authentication bypass within in-house network in Apache Kylin	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-102834: bytedeco javacv: JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries	7.5 High	N/A	N/A	Oct 16, 2026
CVE-2026-102608: zoneminder: ZoneMinder is a free, open source closed-circuit television software application	9.0 Critical	N/A	N/A	Oct 16, 2026
CVE-2026-102607: zoneminder: ZoneMinder is a free, open source closed-circuit television software application	8.8 High	N/A	N/A	Oct 16, 2026
CVE-2026-85977: Red Hat: A flaw was found in libtirpc	5.3 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-85231: Red Hat: A flaw was found in libtirpc	6.5 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-17491: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to…	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-17488: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to…	4.3 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-17275: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed…	3.7 Low	N/A	N/A	Oct 16, 2026
CVE-2026-17073: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks…	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-17068: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper…	5.4 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-111793: Openwave Messaging (Ireland) Limited Webtop Media Transcoder: Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the…	4.3 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-107674: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS…	5.1 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-102917: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege	7.8 High	N/A	N/A	Oct 16, 2026
CVE-2025-66969: n/a: Integer overflow in OpenModSim (<=1.11.0), leading to denial of service	N/A	N/A	N/A	Oct 16, 2026
CVE-2025-55653: n/a: GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c)	N/A	N/A	N/A	Oct 16, 2026
CVE-2025-55640: n/a: A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to…	N/A	N/A	N/A	Oct 16, 2026
CVE-2026-89098: Red Hat: A flaw was found in nfs-utils	5.5 Medium	N/A	N/A	Oct 16, 2026
CVE-2026-81452: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability	7.0 High	N/A	N/A	Oct 16, 2026
CVE-2026-80092: Microsoft microsoft-identity-web: Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate…	5.3 Medium	N/A	N/A	Oct 16, 2026

Rows per page

76-100 of 412906

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business