Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-40615: Totolink: A stack-based buffer overflow vulnerability exists in the boa formParentControl deviceName functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-35499: Totolink: An os command injection vulnerability exists in the boa formWsc peerRptPin functionality of Totolink X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-33568: Totolink: A OS command injection vulnerability exists in the boa formMapDelDevice macstr functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-28763: Totolink: A stack-based buffer overflow vulnerability exists in the boa formMapDelDevice hostname functionality of X2000R…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112712: @fastify/middie: @fastify/middie is the Express-style middleware engine for Fastify	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-112407: AWS CICD-toolchain-for-serverless-applications: Incorrect privilege assignment in the IAM policy of AWS CICD-toolchain-for-serverless-applications 1.0.7 through 1.0.10…	8.8 High	8.7 High	N/A	Oct 20, 2026
CVE-2026-111758: markdown-it: markdown-it is a Markdown parser	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-110322: HMS Networks: The PEAK-System PCAN type 0x4030 processing path fails to validate a selected/returned object pointer before…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2026-10141: Totolink: A Unsigned Firmware vulnerability exists in the boa Firmware Update functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10139: Totolink: A stack-based buffer overflow vulnerability exists in the Mcli functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10138: Totolink: A OS command injection vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10137: Totolink: A stack-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10136: Totolink: A heap-based buffer overflow vulnerability exists in the boa formUpload() functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10135: Totolink: A OS command injection vulnerability exists in the batchupg functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10133: Totolink: A stack-based buffer overflow vulnerability exists in the batchupg functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10132: Totolink: A stack-based buffer overflow vulnerability exists in the boa formIpQos mac functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-10131: Totolink: An OS command injection vulnerability exists in the boa formPasswordSetup functionality of X2000R (version(s):…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-109576: HMS Networks: The parser in PEAK-System PCAN driver correctly detected the malformed record, but the loop iterating the record list…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2026-107929: curl: When `CURLOPT_INTERFACE` (or the command line tool's `--interface` option) is set with one of the documented prefixes…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-107928: curl: When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-105960: HMS Networks: PEAK-System PCAN contains a vulnerable operation involving a variable-length receive-record copy	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2026-103672: HMS Networks: The PEAK-System PCAN parser indexes a length table using attacker-controlled DLC without enforcing DLC <= 0x0f, then…	7.1 High	6.9 Medium	N/A	Oct 20, 2026
CVE-2026-101103: HMS Networks: The PEAK-System PCAN diagnostic call did not validate that the caller-supplied output buffer was large enough to hold…	5.5 Medium	6.8 Medium	N/A	Oct 20, 2026
CVE-2016-20104: EyeLock nano NXT: EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows…	7.5 High	8.7 High	N/A	Oct 20, 2026
CVE-2016-20103: Cherry Team Cherry Plugin: Cherry Plugin for WordPress before 1.2.7 contains a path traversal vulnerability that allows unauthenticated attackers…	7.5 High	8.7 High	N/A	Oct 20, 2026

Rows per page

1651-1675 of 410929

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business