Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-42022: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42021: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42020: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42019: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41223: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41222: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40627: Totolink: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40615: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-35499: Totolink: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-33568: Totolink: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-28763: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112712: @fastify/middie: @fastify/middie is the Express-style middleware engine for Fastify	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112407: AWS CICD-toolchain-for-serverless-applications: Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-111758: markdown-it: markdown-it is a Markdown parser	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-110322: HMS Networks: The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2026-10141: Totolink: A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10139: Totolink: A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10138: Totolink: A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10137: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10136: Totolink: A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10135: Totolink: A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10133: Totolink: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10132: Totolink: A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10131: Totolink: An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-109576: HMS Networks: The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026

Rows per page

1426-1450 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business