Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-87861: curl: When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86415: curl: libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86414: curl: An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket)…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-42026: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42025: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42024: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42023: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42022: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42021: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42020: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42019: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41223: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41222: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40627: Totolink: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40615: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-35499: Totolink: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-33568: Totolink: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-28763: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112712: @fastify/middie: @fastify/middie is the Express-style middleware engine for Fastify	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112407: AWS CICD-toolchain-for-serverless-applications: Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-111758: markdown-it: markdown-it is a Markdown parser	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-110322: HMS Networks: The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2026-10141: Totolink: A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10139: Totolink: A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10138: Totolink: A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026

Rows per page

1101-1125 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business