Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-71170: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability	7.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-71169: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource…	7.0 High	N/A	N/A	Oct 19, 2026
CVE-2026-112782: getgrav grav: Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows…	7.5 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112781: getgrav grav: Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read…	6.5 Medium	8.7 High	N/A	Oct 19, 2026
CVE-2026-112780: getgrav grav: Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary…	8.8 High	9.3 Critical	N/A	Oct 19, 2026
CVE-2026-112779: getgrav grav-plugin-api: Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed…	9.8 Critical	9.3 Critical	N/A	Oct 19, 2026
CVE-2026-112778: traefik: Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in…	N/A	6.4 Medium	N/A	Oct 19, 2026
CVE-2026-112777: craftcms cms: Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its…	7.2 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112776: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL…	9.8 Critical	9.3 Critical	N/A	Oct 19, 2026
CVE-2026-112775: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse…	7.5 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112774: craftcms cms: Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated…	7.2 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112773: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…	8.8 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112772: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…	8.8 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112771: craftcms cms: Craft CMS 4.0.0 before 4.18.8 and 5.0.0 before 5.11.0 contains a Twig sandbox allowlist bypass because the column,…	6.5 Medium	7.1 High	N/A	Oct 19, 2026
CVE-2026-112770: craftcms cms: Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group…	8.8 High	8.7 High	N/A	Oct 19, 2026
CVE-2026-112769: parse-community parse-server: Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level…	N/A	2.3 Low	N/A	Oct 19, 2026
CVE-2026-112768: parse-community parse-server: Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user…	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-112297: ptbsare anx-calibre-manager: A flaw has been found in ptbsare anx-calibre-manager up to 1.13.12	4.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-112260: Red Hat: A flaw was found in GIMP	7.1 High	N/A	N/A	Oct 19, 2026
CVE-2026-112254: agit8or1 clientst0r: A vulnerability was found in agit8or1 clientst0r up to 3.17.586	4.3 Medium	2.1 Low	N/A	Oct 19, 2026
CVE-2026-111766: markdown-it: markdown-it is a Markdown parser	3.7 Low	N/A	N/A	Oct 19, 2026
CVE-2024-54581: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-112259: Red Hat: A flaw was found in GIMP	5.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-112252: Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System: A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management…	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112251: antoinersx clawhost: A vulnerability was detected in antoinersx clawhost up to 0.0.45	4.3 Medium	2.1 Low	N/A	Oct 19, 2026

Rows per page

151-175 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business