Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-59268: Out-of-bounds Write	7.3 High	N/A	0%	Nov 4, 2026
CVE-2026-59264: Uncontrolled Search Path Element	7.8 High	N/A	0%	Nov 4, 2026
CVE-2026-59263: Acceptance of Extraneous Untrusted Data With Trusted Data	5.5 Medium	1.9 Low	0%	Nov 4, 2026
CVE-2026-108946: Improper Input Validation	N/A	N/A	0%	Nov 4, 2026
CVE-2026-108500: Improper Input Validation	N/A	N/A	0%	Nov 4, 2026
CVE-2026-103582: Memory Allocation with Excessive Size Value	N/A	N/A	0%	Nov 4, 2026
CVE-2026-102704: Protection Mechanism Failure	4.4 Medium	N/A	0%	Nov 4, 2026
CVE-2026-102703: Incorrect Type Conversion or Cast	4.4 Medium	N/A	0%	Nov 4, 2026
CVE-2026-100302: Allocation of Resources Without Limits or Throttling	N/A	7.1 High	1%	Nov 4, 2026
CVE-2026-100300: Improper Handling of Exceptional Conditions	N/A	8.7 High	0%	Nov 4, 2026
CVE-2026-100252: Incorrect Authorization	N/A	8.6 High	1%	Nov 4, 2026
CVE-2026-100235: Time-of-check Time-of-use (TOCTOU) Race Condition	N/A	6.0 Medium	0%	Nov 4, 2026
CVE-2026-59267: Heap-based Buffer Overflow	N/A	5.8 Medium	0%	Nov 4, 2026
CVE-2026-115448: Allocation of Resources Without Limits or Throttling	N/A	8.7 High	1%	Nov 4, 2026
CVE-2026-95649: Inclusion of Functionality from Untrusted Control Sphere	N/A	6.1 Medium	0%	Nov 4, 2026
CVE-2026-94460: Incorrect Default Permissions	N/A	7.2 High	0%	Nov 4, 2026
CVE-2026-94459: Use of Default Credentials	N/A	7.2 High	0%	Nov 4, 2026
CVE-2026-93900: Improper Neutralization of Input During Web Page Generation	6.4 Medium	N/A	0%	Nov 4, 2026
CVE-2026-120554: Incorrect Authorization	8.8 High	N/A	1%	Nov 4, 2026
CVE-2026-120422: Undefined Security Weakness	N/A	8.9 High	0%	Nov 4, 2026
CVE-2026-115498: Improper Neutralization of Input During Web Page Generation	7.2 High	N/A	0%	Nov 4, 2026
CVE-2026-111822: Undefined Security Weakness	N/A	N/A	0%	Nov 4, 2026
CVE-2026-111821: Improper Input Validation	N/A	N/A	0%	Nov 4, 2026
CVE-2026-111040: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)	N/A	5.1 Medium	0%	Nov 4, 2026
CVE-2026-111038: Improper Neutralization of Formula Elements in a CSV File	N/A	7.3 High	0%	Nov 4, 2026

25 rows per page

976-1000 of 420775

‹›

MDR Buyer's Guide

Global Threat Landscape Report