Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-41607: Out-of-bounds Read	6.5 Medium	N/A	0%	Apr 28, 2026
CVE-2026-41606: Uncontrolled Recursion	5.3 Medium	N/A	1%	Apr 28, 2026
CVE-2026-41605: Integer Overflow or Wraparound	7.3 High	N/A	0%	Apr 28, 2026
CVE-2026-41604: Out-of-bounds Read	8.2 High	N/A	0%	Apr 28, 2026
CVE-2026-41602: Integer Overflow or Wraparound	7.5 High	N/A	0%	Apr 28, 2026
CVE-2025-48431: Mismatched Memory Management Routines	7.5 High	N/A	1%	Apr 28, 2026
CVE-2026-41081: Improper Authentication	6.5 Medium	N/A	0%	Apr 27, 2026
CVE-2026-40557: Improper Certificate Validation	4.8 Medium	N/A	0%	Apr 27, 2026
CVE-2026-33453: Improperly Controlled Modification of Dynamically-Determined Object Attributes	10.0 Critical	N/A	1%	Apr 27, 2026
CVE-2026-27172: Deserialization of Untrusted Data	8.8 High	N/A	0%	Apr 27, 2026
CVE-2026-41409: Deserialization of Untrusted Data	9.8 Critical	N/A	0%	Apr 27, 2026
CVE-2026-40858: Deserialization of Untrusted Data	8.8 High	N/A	0%	Apr 27, 2026
CVE-2026-40022: Authentication Bypass Using an Alternate Path or Channel	8.2 High	N/A	1%	Apr 27, 2026
CVE-2026-33454: Deserialization of Untrusted Data	9.4 Critical	N/A	1%	Apr 27, 2026
CVE-2026-41635: Deserialization of Untrusted Data	9.8 Critical	N/A	0%	Apr 27, 2026
CVE-2026-40473: Deserialization of Untrusted Data	8.8 High	N/A	0%	Apr 27, 2026
CVE-2026-40453: Improper Handling of Case Sensitivity	9.9 Critical	N/A	0%	Apr 27, 2026
CVE-2026-40048: Deserialization of Untrusted Data	7.8 High	N/A	0%	Apr 27, 2026
CVE-2026-40860: Deserialization of Untrusted Data	N/A	N/A	0%	Apr 27, 2026
CVE-2026-39920: Initialization of a Resource with an Insecure Default	9.8 Critical	9.3 Critical	0%	Apr 24, 2026
CVE-2026-23902: Incorrect Authorization	8.1 High	N/A	0%	Apr 24, 2026
CVE-2026-41044: Improper Input Validation	8.8 High	N/A	0%	Apr 24, 2026
CVE-2026-41043: Improper Neutralization of Input During Web Page Generation	6.5 Medium	N/A	0%	Apr 24, 2026
CVE-2026-40466: Improper Input Validation	8.8 High	N/A	0%	Apr 24, 2026
CVE-2025-62233: Deserialization of Untrusted Data	6.3 Medium	N/A	0%	Apr 24, 2026

Rows per page

1226-1250 of 4464

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business