Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-85742: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.5 High	N/A	N/A	Nov 6, 2026
CVE-2026-123748: chenyme grok2api: A security flaw has been discovered in chenyme grok2api up to 3.1.6	4.3 Medium	5.3 Medium	N/A	Nov 6, 2026
CVE-2026-103985: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.1 High	N/A	N/A	Nov 6, 2026
CVE-2026-123962: Debian FreedomBox: In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting…	8.4 High	N/A	N/A	Nov 6, 2026
CVE-2026-122193: AWS trusted-remote-execution: OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before…	9.9 Critical	9.3 Critical	N/A	Nov 6, 2026
CVE-2026-103984: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-85743: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	8.2 High	N/A	N/A	Nov 6, 2026
CVE-2026-85744: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62850: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	5.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62852: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	6.5 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62855: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	4.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62851: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	4.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62856: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox application	7.7 High	N/A	N/A	Nov 6, 2026
CVE-2026-106141: Progress Software Kendo UI for Angular: Cross-Site Scripting (XSS) in the Editor component (@progress/kendo-angular-editor) in Progress Software Kendo UI for…	5.4 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-62854: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox	7.6 High	N/A	N/A	Nov 6, 2026
CVE-2026-122053: sensiolabs symfony: The Symfony Serializer component ObjectNormalizer treats any attribute name containing	N/A	6.9 Medium	N/A	Nov 6, 2026
CVE-2026-90436: Apache Software Foundation Apache Axis 1.x (EOL): UNSUPPORTED WHEN ASSIGNED Deserialization of an inbound SOAP fault in Apache Axis 1.x allows unauthenticated…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80303: Gen Digital: An integer underflow vulnerability in the Avast Windows Filtering Platform (WFP) stream parser on Windows allows denial…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80302: Gen Digital: Insufficient isolation in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-80301: Gen Digital: Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox…	N/A	N/A	N/A	Nov 6, 2026
CVE-2026-66987: HCL Software HCL AION: HCL AION is affected by a vulnerability where the account lockout mechanism did not sufficiently restrict repeated…	5.3 Medium	N/A	N/A	Nov 6, 2026
CVE-2026-66986: HCL Software HCL AION: HCL AION is affected by a vulnerability where user sessions did not expire after a sufficient period of inactivity	3.3 Low	N/A	N/A	Nov 6, 2026
CVE-2026-66984: HCL Software HCL AION: HCL AION is affected by a vulnerability where certain application responses revealed internal server file system paths	3.1 Low	N/A	N/A	Nov 6, 2026
CVE-2026-66982: HCL Software HCL AION: HCL AION is affected by a vulnerability where browser autocomplete was enabled on sensitive login form fields, allowing…	3.3 Low	N/A	N/A	Nov 6, 2026
CVE-2026-66981: HCL Software HCL AION: HCL AION is affected by a vulnerability where the application trusted the value of the HTTP Host header supplied in…	6.5 Medium	N/A	N/A	Nov 6, 2026

25 rows per page

126-150 of 425038

‹›

MDR Buyer's Guide

Global Threat Landscape Report