Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-124567: fushengqian fuint: A flaw has been found in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f	4.3 Medium	5.3 Medium	N/A	Nov 9, 2026
CVE-2026-124566: fushengqian fuint: A vulnerability was detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f	4.3 Medium	5.3 Medium	N/A	Nov 9, 2026
CVE-2026-124565: fushengqian fuint: A security vulnerability has been detected in fushengqian fuint up to 36cc31b08d77facc94e8959afa02224891b4fe5f	4.3 Medium	5.3 Medium	N/A	Nov 9, 2026
CVE-2026-113364: NEC Corporation WebSAM WinShare: Buffer Overflow in the data receiving process in NEC Corporation WebSAM WinShare Ver 7.5.0 and earlier, Ver 7.6.0 and…	N/A	9.3 Critical	N/A	Nov 9, 2026
CVE-2026-113363: NEC Corporation WebSAM WinShare: Improper Input Validation in the network communication processing in NEC Corporation WebSAM WinShare Ver 7.2.0 through…	N/A	9.3 Critical	N/A	Nov 9, 2026
CVE-2026-124562: D-Link DIR-878: A vulnerability was identified in D-Link DIR-878 1.20B05	7.5 High	7.7 High	N/A	Nov 9, 2026
CVE-2026-124561: D-Link DIR-878: A vulnerability was determined in D-Link DIR-878 1.20B05	7.5 High	7.7 High	N/A	Nov 9, 2026
CVE-2026-113362: NEC Corporation WebSAM WinShare: Improper Access Control in the program installation folder in NEC Corporation WebSAM Winshare Ver 7.5.0 and earlier…	N/A	8.5 High	N/A	Nov 9, 2026
CVE-2026-124564: D-Link DIR-878: A weakness has been identified in D-Link DIR-878 1.20B05	5.3 Medium	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124563: D-Link DIR-878: A security flaw has been discovered in D-Link DIR-878 1.20B05	7.5 High	7.7 High	N/A	Nov 9, 2026
CVE-2026-124560: D-Link DIR-878: A vulnerability was found in D-Link DIR-878 1.20B05	9.8 Critical	8.9 High	N/A	Nov 9, 2026
CVE-2026-124558: DataLinkDC Dinky: A vulnerability has been found in DataLinkDC Dinky up to 1.2.5	7.3 High	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124557: OtterMind Chat2DB: A vulnerability was detected in OtterMind Chat2DB up to 5.3.8	7.3 High	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124556: kekingcn kkFileView: A security vulnerability has been detected in kekingcn kkFileView up to 5.0.3	4.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-121825: OpenAM consortium OpenAM (OpenAM Consortium Edition): OpenAM (OpenAM Consortium Edition) 14.0.5 and earlier contains an open redirect vulnerability (CWE-601) in the Liberty…	6.1 Medium	5.1 Medium	N/A	Nov 9, 2026
CVE-2026-124555: n/a JeecgBoot: A weakness has been identified in JeecgBoot 3.9.5	6.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-124554: n/a JeecgBoot: A security flaw has been discovered in JeecgBoot 3.9.5	7.3 High	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124509: floci-io Floci: A vulnerability was identified in floci-io Floci up to 2.1.0	7.3 High	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124508: floci-io Floci: A vulnerability was determined in floci-io Floci up to 2.4.0	5.3 Medium	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124507: conductor-oss conductor: A vulnerability was found in conductor-oss conductor up to 3.32.4/3.33.0/3.34.0-rc3/4.0.0-alpha.1	5.3 Medium	5.5 Medium	N/A	Nov 9, 2026
CVE-2026-124506: Dianping CAT: A vulnerability has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1	4.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-124505: Dianping CAT: A flaw has been found in Dianping CAT 3.0.0/3.1.0/4.0-RC1	4.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-124504: erupts erupt: A vulnerability was detected in erupts erupt up to 2.3.0	6.3 Medium	2.1 Low	N/A	Nov 9, 2026
CVE-2026-119506: DynamiApps Frontend Admin by DynamiApps: Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element…	9.1 Critical	N/A	N/A	Nov 9, 2026
CVE-2026-124502: yungifez Skuul School Management System: A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.3	4.3 Medium	2.1 Low	N/A	Nov 9, 2026

25 rows per page

101-125 of 418829

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business