Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-124326: DataLinkDC Dinky: A flaw has been found in DataLinkDC Dinky up to 1.2.5	5.4 Medium	2.1 Low	N/A	Nov 8, 2026
CVE-2026-110963: Unknown Userplace: The Userplace WordPress plugin through 1.2.0 does not perform authorization checks on an AJAX action available to…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-110132: Unknown Sync Post With Other Site: The Sync Post With Other Site WordPress plugin before 1.9.4 does not properly authorize a content-management action for…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-109925: Unknown Productive Commerce: The Productive Commerce WordPress plugin before 1.1.54 does not sanitise and escape a parameter before using it in a…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-106015: Unknown Ecommerce Affiliate: The Ecommerce Affiliate WordPress plugin through 1.0.0 does not restrict one-time password issuance and verification to…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-105970: Unknown Thanh Toán Quét Mã QR Code Tự Động: The Thanh Toán Quét Mã QR Code Tự Động WordPress plugin through 2.0.1 does not properly verify the authenticity of…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-104639: Unknown Razorpay for WooCommerce: The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not sanitize and escape a value derived from an…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-104338: Unknown Razorpay for WooCommerce: The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not perform an authorization check on one of its REST…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-104337: Unknown Razorpay for WooCommerce: The Razorpay for WooCommerce WordPress plugin before 4.8.9 does not verify ownership of an order before returning a…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-104307: Unknown BackUpWordPress: The BackUpWordPress plugin before 3.15 does not perform a capability or nonce check on an AJAX action that cleans up…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-103303: Unknown Turisbook Booking System: The Turisbook Booking System WordPress plugin through 1.3.8 does not have authorisation and CSRF checks when saving its…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-114432: Unknown Contact Form 7: The Contact Form 7 WordPress plugin before 6.2.4 does not validate the type or extension of files uploaded through a…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-96963: Unknown Pie Register: The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions,…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-96961: Unknown Pie Register: The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication check on…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-103375: Unknown Antom Payments: The Antom Payments WordPress plugin through 2.0.11 does not perform any ownership or authorisation check before…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-97195: Unknown Secure Custom Fields: The Secure Custom Fields WordPress plugin before 6.9.8 does not sanitize a persisted field definition before emitting…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-97194: Unknown Secure Custom Fields: The Secure Custom Fields WordPress plugin before 6.9.8 does not perform a read-permission check when it renders and…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-97193: Unknown Secure Custom Fields: The Secure Custom Fields WordPress plugin before 6.9.8 does not verify that a user is allowed to edit the target object…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-97192: Unknown Secure Custom Fields: The Secure Custom Fields WordPress plugin before 6.9.8 does not re-apply its field-group location rules when persisting…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-85344: Unknown FV Flowplayer Video Player: The FV Flowplayer Video Player WordPress plugin before 7.5.57.7212 does not perform any authorization check on an AJAX…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-122085: Unknown Event Tickets Manager for WooCommerce: The Event Tickets Manager for WooCommerce WordPress plugin before 1.6.0 does not perform authorisation or a valid nonce…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-122062: Unknown: The Pronamic Pay WordPress plugin before 11.1.0, Pronamic Pay doneren met Mollie WordPress plugin before 1.7.1 do not…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-122060: Unknown WP Recipe Maker: The WP Recipe Maker WordPress plugin before 10.9.2 does not check whether the post a recipe is embedded in is password…	N/A	N/A	N/A	Nov 8, 2026
CVE-2026-114713: UnrealIRCd: The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when…	8.6 High	N/A	N/A	Nov 8, 2026
CVE-2026-124422: jihong88 suneditor: SunEditor from 3.0.0 before 3.4.0 contains a stored cross-site scripting vulnerability in html.clean() that rebuilds…	6.1 Medium	5.3 Medium	N/A	Nov 8, 2026

25 rows per page

126-150 of 420796

‹›

MDR Buyer's Guide

Global Threat Landscape Report