Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-43868: Memory Allocation with Excessive Size Value	N/A	N/A	1%	May 5, 2026
CVE-2026-42812: Incorrect Authorization	9.9 Critical	9.4 Critical	1%	May 4, 2026
CVE-2026-42811: Improper Neutralization of Special Elements used in an Expression Language Statement	9.9 Critical	9.4 Critical	1%	May 4, 2026
CVE-2026-42810: Improper Encoding or Escaping of Output	9.9 Critical	9.4 Critical	1%	May 4, 2026
CVE-2026-42809: Missing Authorization	9.9 Critical	9.4 Critical	1%	May 4, 2026
CVE-2026-42440: Memory Allocation with Excessive Size Value	7.5 High	N/A	1%	May 4, 2026
CVE-2026-42027: Use of Externally-Controlled Input to Select Classes or Code	9.8 Critical	N/A	1%	May 4, 2026
CVE-2026-40682: Improper Restriction of XML External Entity Reference	9.1 Critical	N/A	0%	May 4, 2026
CVE-2026-40563: Improper Control of Generation of Code	8.1 High	N/A	0%	May 4, 2026
CVE-2026-33523: DEPRECATED: HTTP response splitting	6.5 Medium	N/A	0%	May 4, 2026
CVE-2026-33007: NULL Pointer Dereference	5.3 Medium	N/A	1%	May 4, 2026
CVE-2026-33006: Observable Timing Discrepancy	4.8 Medium	N/A	1%	May 4, 2026
CVE-2026-29169: NULL Pointer Dereference	7.5 High	N/A	2%	May 4, 2026
CVE-2026-23918: Double Free	8.8 High	N/A	46%	May 4, 2026
CVE-2026-34032: Improper Null Termination	5.3 Medium	N/A	1%	May 4, 2026
CVE-2026-33857: Out-of-bounds Read	5.3 Medium	N/A	1%	May 4, 2026
CVE-2026-34059: Buffer Over-read	7.5 High	N/A	1%	May 4, 2026
CVE-2026-24072: Improper Privilege Management	8.8 High	N/A	1%	May 4, 2026
CVE-2026-42779: Deserialization of Untrusted Data	9.8 Critical	N/A	0%	May 1, 2026
CVE-2026-42778: Deserialization of Untrusted Data	9.8 Critical	N/A	0%	May 1, 2026
CVE-2026-42404: Server-Side Request Forgery (SSRF)	6.5 Medium	N/A	0%	May 1, 2026
CVE-2026-42403: Uncontrolled Resource Consumption	7.5 High	N/A	0%	May 1, 2026
CVE-2026-42402: Uncontrolled Resource Consumption	7.5 High	N/A	0%	May 1, 2026
CVE-2026-41016: Improper Certificate Validation	5.9 Medium	N/A	0%	Apr 30, 2026
CVE-2026-41636: Uncontrolled Recursion	7.5 High	8.7 High	0%	Apr 28, 2026

Rows per page

1201-1225 of 4464

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business