Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112306: nocobase: NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged…	7.2 High	8.6 High	N/A	Oct 19, 2026
CVE-2026-112305: semaphoreui Semaphore UI: Semaphore UI through 2.19.16 contains a remote code execution vulnerability that allows users with the task_runner role…	8.8 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112304: Mindee docTR: docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints…	7.5 High	7.7 High	N/A	Oct 19, 2026
CVE-2026-112158: MikroTik RouterOS: A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8	6.5 Medium	7.1 High	N/A	Oct 19, 2026
CVE-2026-112157: MemTensor memmy-agent: A weakness has been identified in MemTensor memmy-agent up to 1.0.9/1.1.1/1.2.2	3.1 Low	1.3 Low	N/A	Oct 19, 2026
CVE-2026-112153: vraj404 Criminal-Management-System: A vulnerability was detected in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112152: vraj404 Criminal-Management-System: A security vulnerability has been detected in vraj404 Criminal-Management-System up to…	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-111058: mljar mercury: Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards	9.8 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111057: mljar mercury: Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards	10.0 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111056: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-111053: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-111046: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	2.3 Low	N/A	Oct 19, 2026
CVE-2026-111045: anshupriyan cli-bridge: CLI Bridge provides filesystem access within a workspace root	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-109433: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit…	6.5 Medium	6.0 Medium	N/A	Oct 19, 2026
CVE-2026-109432: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where…	9.8 Critical	9.3 Critical	N/A	Oct 19, 2026
CVE-2026-109431: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in…	8.1 High	8.6 High	N/A	Oct 19, 2026
CVE-2026-107571: Progressive Robot Ltd hMailServer: Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a…	7.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-107569: Progressive Robot Ltd hMailServer: Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-107568: Progressive Robot Ltd hMailServer: Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-107567: Progressive Robot Ltd hMailServer: Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-107566: Progressive Robot Ltd hMailServer: Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-107081: n/a: SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-112308: crewAIInc crewai-tools: crewai-tools through 1.15.28 contains a server-side request forgery vulnerability in SeleniumScrapingTool that allows…	7.4 High	8.3 High	N/A	Oct 19, 2026
CVE-2026-112303: GDevelop: GDevelop desktop app through 5.6.284 contains a credential leak vulnerability that allows attackers to steal the…	4.3 Medium	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112329: Automattic Sensei LMS: The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy…	4.3 Medium	5.3 Medium	N/A	Oct 19, 2026

Rows per page

101-125 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business