Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-119641: Improper Input Validation	N/A	N/A	0%	Nov 3, 2026
CVE-2026-92610: Improper Limitation of a Pathname to a Restricted Directory	N/A	N/A	0%	Nov 3, 2026
CVE-2026-91075: Undefined Security Weakness	5.3 Medium	N/A	0%	Nov 3, 2026
CVE-2026-121024: Incorrect Authorization	5.4 Medium	5.3 Medium	0%	Nov 3, 2026
CVE-2026-121023: Insertion of Sensitive Information into Log File	5.5 Medium	6.8 Medium	0%	Nov 3, 2026
CVE-2026-121022: Use of Default Password	8.1 High	9.2 Critical	0%	Nov 3, 2026
CVE-2026-121021: Plaintext Storage of a Password	5.5 Medium	6.8 Medium	0%	Nov 3, 2026
CVE-2026-121020: Exposure of Sensitive Information to an Unauthorized Actor	4.3 Medium	5.3 Medium	0%	Nov 3, 2026
CVE-2026-118448: Use of Uninitialized Variable	N/A	6.9 Medium	0%	Nov 3, 2026
CVE-2026-118447: Use of Uninitialized Variable	N/A	4.8 Medium	0%	Nov 3, 2026
CVE-2026-118446: Use After Free	N/A	6.9 Medium	0%	Nov 3, 2026
CVE-2026-118445: Use After Free	N/A	6.9 Medium	0%	Nov 3, 2026
CVE-2026-118444: Out-of-bounds Read	N/A	4.8 Medium	0%	Nov 3, 2026
CVE-2026-115231: Improper Privilege Management	N/A	8.5 High	0%	Nov 3, 2026
CVE-2026-113421: Use After Free	N/A	7.3 High	0%	Nov 3, 2026
CVE-2026-109161: Buffer Copy without Checking Size of Input	4.9 Medium	6.9 Medium	0%	Nov 3, 2026
CVE-2026-105982: Improper Neutralization of Special Elements used in a Command	7.2 High	8.6 High	0%	Nov 3, 2026
CVE-2026-105981: Improper Neutralization of Special Elements used in an OS Command	7.2 High	8.6 High	0%	Nov 3, 2026
CVE-2026-105980: Improper Neutralization of Special Elements used in a Command	7.2 High	8.6 High	0%	Nov 3, 2026
CVE-2026-105979: Improper Neutralization of Special Elements used in a Command	7.2 High	8.6 High	0%	Nov 3, 2026
CVE-2026-105978: Improper Neutralization of Special Elements used in an OS Command	7.2 High	8.6 High	0%	Nov 3, 2026
CVE-2026-103327: Undefined Security Weakness	5.3 Medium	N/A	0%	Nov 3, 2026
CVE-2026-74846: Observable Timing Discrepancy	N/A	N/A	0%	Nov 3, 2026
CVE-2026-4052: Missing Authorization	9.8 Critical	N/A	0%	Nov 3, 2026
CVE-2026-16900: Improper Access Control	7.5 High	N/A	2%	Nov 3, 2026

25 rows per page

976-1000 of 418286

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business