Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-92388: curl: When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-92387: curl: By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-92386: curl: When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87866: curl: When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87865: curl: When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87864: curl: Enabling `CURLOPT_CRLF` causes curl to advertise the raw input byte count in the `IMAP APPEND {N}` literal while…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87863: curl: An authenticated HTTPS origin can supply an HSTS `max-age` value that the parser accepts, but time serialization later…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87862: curl: Importing a `includeSubDomains` parent HSTS entry before a longer-lived child entry, silently drops the child	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-87861: curl: When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86415: curl: libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-86414: curl: An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket)…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-42026: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42025: Totolink: Multiple exploitable stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup dhcp_dns functionality…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42024: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42023: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42022: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42021: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup static network configuration…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42020: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-42019: Totolink: Multiple stack-based buffer overflow vulnerabilities exist in the boa formIpv6Setup pppoe functionality of Totolink…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41223: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-41222: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl url functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40627: Totolink: An os command injection vulnerability exists in the boa formWsc targetAPSsid functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-40615: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-35499: Totolink: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-33568: Totolink: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026

Rows per page

1576-1600 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business