Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-89284: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 24, 2026
CVE-2026-115996: Unitree Robotics Unitree Go2: A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.1	3.7 Low	6.3 Medium	N/A	Oct 24, 2026
CVE-2026-115995: Unitree Robotics Unitree Go2: A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4	9.6 Critical	9.4 Critical	N/A	Oct 24, 2026
CVE-2026-111326: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 24, 2026
CVE-2026-109111: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 24, 2026
CVE-2026-115982: n/a phpIPAM: A vulnerability was detected in phpIPAM up to 1.8.3	4.3 Medium	2.1 Low	N/A	Oct 24, 2026
CVE-2026-115981: n/a phpIPAM: A security vulnerability has been detected in phpIPAM up to 1.8.3	2.4 Low	1.9 Low	N/A	Oct 24, 2026
CVE-2026-115973: FaveoSuite Faveo Helpdesk: A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.3	7.3 High	6.9 Medium	N/A	Oct 24, 2026
CVE-2026-114820: Oracle Corporation: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…	9.1 Critical	N/A	N/A	Oct 24, 2026
CVE-2026-115972: FaveoSuite Faveo Helpdesk: A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.3	5.3 Medium	6.9 Medium	N/A	Oct 24, 2026
CVE-2026-115971: Travisun Opptrix: A vulnerability was found in Travisun Opptrix 0.4.0	5.3 Medium	5.5 Medium	N/A	Oct 24, 2026
CVE-2026-115970: Travisun Opptrix: A vulnerability has been found in Travisun Opptrix 0.4.0	7.3 High	5.5 Medium	N/A	Oct 24, 2026
CVE-2026-115969: Travisun Opptrix: A flaw has been found in Travisun Opptrix 0.4.0	7.3 High	5.5 Medium	N/A	Oct 24, 2026
CVE-2026-115933: GitroomHQ postiz-app: Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a…	9.9 Critical	N/A	N/A	Oct 24, 2026
CVE-2026-114704: Christoph Vielgrader Relevanssi: Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object…	7.2 High	N/A	N/A	Oct 24, 2026
CVE-2026-114629: Memory Allocation with Excessive Size Value	N/A	N/A	N/A	Oct 24, 2026
CVE-2026-114192: Magepeople inc. WpEvently: Missing Authorization vulnerability in Magepeople inc	6.5 Medium	N/A	N/A	Oct 24, 2026
CVE-2026-114191: Knit Pay UPI QR Code Payment Gateway for WooCommerce: Missing Authorization vulnerability in Knit Pay UPI QR Code Payment Gateway for WooCommerce…	7.5 High	N/A	N/A	Oct 24, 2026
CVE-2026-115557: Python Software Foundation CPython: Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without…	N/A	9.4 Critical	N/A	Oct 24, 2026
CVE-2026-115932: GitroomHQ postiz-app: When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it…	9.6 Critical	N/A	N/A	Oct 24, 2026
CVE-2026-116020: BookStackApp BookStack: BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows…	5.4 Medium	5.3 Medium	N/A	Oct 24, 2026
CVE-2026-116019: getgrav grav: Grav 2.0.15 before 2.2.13 contains an allowlist bypass vulnerability that allows page editors to invoke arbitrary…	8.8 High	8.7 High	N/A	Oct 24, 2026
CVE-2026-116018: ONEARMY community-platform: ONEARMY community-platform before 2.165.2 contains an insecure direct object reference vulnerability that allows…	4.3 Medium	5.3 Medium	N/A	Oct 24, 2026
CVE-2026-116017: xinnan-tech xiaozhi-esp32-server: Xiaozhi-esp32-server before 0.9.8 contains an insecure direct object reference vulnerability in the manager-api…	4.3 Medium	5.3 Medium	N/A	Oct 24, 2026
CVE-2026-116016: YunaiV yudao-cloud: yudao-cloud through 2026.09 contains an authorization bypass vulnerability that allows authenticated users to evade…	7.1 High	7.1 High	N/A	Oct 24, 2026

Rows per page

126-150 of 537999

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business