Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-113134: Google Chrome: Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113092: Google Chrome: Use after free in Passwords in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113119: Google Chrome: Use after free in Network in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113058: Google Chrome: Use after free in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113242: Google Chrome: Memory corruption in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113097: Google Chrome: Use after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113101: Google Chrome: Use after free in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113303: Google Chrome: Memory corruption in WebRTC in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113271: Google Chrome: Use after free in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113280: Google Chrome: Memory corruption in Paint in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113279: Google Chrome: Memory corruption in Accessibility in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86413: curl: When using an ambient user in a first transfer doing Negotiate authentication and asked to follow redirects, curl…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86412: curl: A remote HTTP server can set a cookie that curl accepts and writes to a Netscape cookie jar but cannot reload	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86411: curl: An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86410: curl: A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86409: curl: Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113869: Mozilla Thunderbird: When Thunderbird asked for a security device password (for example a smartcard PIN or the Primary Password) while…	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113868: Mozilla Thunderbird: When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was…	5.3 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113867: Mozilla Thunderbird: Thunderbird did not escape attribute values when serializing outgoing XMPP stanzas	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113866: Mozilla Thunderbird: When setting up an account, Thunderbird's Exchange AutoDiscover lookup also queried the domain's AutoDiscover service…	5.9 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113725: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	7.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-113724: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	4.5 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113723: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	N/A	7.1 High	N/A	Oct 20, 2026
CVE-2026-113722: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	7.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-113721: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments	4.5 Medium	N/A	N/A	Oct 20, 2026

Rows per page

1526-1550 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business