Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2024-21890: Undefined Security Weakness	6.5 Medium	N/A	1%	Feb 20, 2024
CVE-2023-31728: Undefined Security Weakness	7.0 High	N/A	0%	Feb 17, 2024
CVE-2024-1378: Improper Input Validation	9.1 Critical	N/A	2%	Feb 13, 2024
CVE-2024-1374: Improper Input Validation	9.1 Critical	N/A	3%	Feb 13, 2024
CVE-2024-1372: Improper Input Validation	9.1 Critical	N/A	2%	Feb 13, 2024
CVE-2024-1369: Improper Input Validation	9.1 Critical	N/A	2%	Feb 13, 2024
CVE-2024-1359: Improper Input Validation	9.1 Critical	N/A	2%	Feb 13, 2024
CVE-2024-1355: Improper Input Validation	9.1 Critical	N/A	2%	Feb 13, 2024
CVE-2024-1354: Improper Input Validation	8.0 High	N/A	2%	Feb 13, 2024
CVE-2024-25711: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	N/A	1%	Feb 11, 2024
CVE-2024-0229: Out-of-bounds Write	7.8 High	N/A	1%	Feb 9, 2024
CVE-2024-21653: Improper Access Control	6.5 Medium	N/A	0%	Jan 30, 2024
CVE-2023-6926: Improper Neutralization of Special Elements used in an OS Command	8.4 High	N/A	1%	Jan 23, 2024
CVE-2024-0725: Improper Resource Shutdown or Release	5.3 Medium	N/A	4%	Jan 19, 2024
CVE-2024-0723: Improper Resource Shutdown or Release	5.3 Medium	N/A	4%	Jan 19, 2024
CVE-2024-0417: Path Traversal: '../filedir'	5.4 Medium	N/A	1%	Jan 11, 2024
CVE-2024-0412: Improper Access Control	5.3 Medium	N/A	1%	Jan 11, 2024
CVE-2023-42829: Exposure of Sensitive Information to an Unauthorized Actor	5.5 Medium	N/A	0%	Jan 10, 2024
CVE-2023-48251: Use of Hard-coded Credentials	8.1 High	N/A	1%	Jan 10, 2024
CVE-2023-6004: Improper Neutralization of Special Elements in Output Used by a Downstream Component	4.8 Medium	N/A	0%	Jan 3, 2024
CVE-2022-3010: Use of Weak Credentials	7.5 High	N/A	1%	Jan 2, 2024
CVE-2023-40236: Use of Hard-coded Credentials	5.3 Medium	N/A	0%	Dec 25, 2023
CVE-2023-51767: Undefined Security Weakness	7.0 High	N/A	1%	Dec 24, 2023
CVE-2023-6918: Unchecked Return Value	5.3 Medium	N/A	1%	Dec 19, 2023
CVE-2023-51385: Improper Neutralization of Special Elements used in an OS Command	6.5 Medium	N/A	20%	Dec 18, 2023

25 rows per page

976-1000 of 2138

‹›

MDR Buyer's Guide

Global Threat Landscape Report