Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2024-39928: Inadequate Encryption Strength	7.5 High	N/A	0%	Sep 25, 2024
CVE-2024-37779: Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)	8.8 High	N/A	3%	Sep 23, 2024
CVE-2024-46544: Incorrect Default Permissions	5.9 Medium	N/A	0%	Sep 23, 2024
CVE-2024-42323: Deserialization of Untrusted Data	8.8 High	N/A	70%	Sep 21, 2024
CVE-2024-45537: Improper Input Validation	6.5 Medium	N/A	0%	Sep 17, 2024
CVE-2024-45384: Generation of Error Message Containing Sensitive Information	5.3 Medium	N/A	0%	Sep 17, 2024
CVE-2024-22399: Deserialization of Untrusted Data	9.8 Critical	N/A	78%	Sep 16, 2024
CVE-2024-8646: URL Redirection to Untrusted Site	6.1 Medium	N/A	1%	Sep 11, 2024
CVE-2024-45498: Improper Encoding or Escaping of Output	8.8 High	N/A	2%	Sep 7, 2024
CVE-2024-45034: Execution with Unnecessary Privileges	8.8 High	N/A	3%	Sep 7, 2024
CVE-2024-7923: Improper Authentication	9.8 Critical	N/A	0%	Sep 4, 2024
CVE-2024-7012: Improper Authentication	9.8 Critical	N/A	0%	Sep 4, 2024
CVE-2024-45507: Server-Side Request Forgery (SSRF)	9.8 Critical	N/A	90%	Sep 4, 2024
CVE-2024-45195: Direct Request	7.5 High	N/A	94%	Sep 4, 2024
CVE-2024-45623: Improper Control of Generation of Code	9.8 Critical	N/A	1%	Sep 2, 2024
CVE-2024-43804: Improper Neutralization of Special Elements used in an OS Command	8.8 High	N/A	2%	Aug 29, 2024
CVE-2023-49582: Incorrect Permission Assignment for Critical Resource	5.5 Medium	N/A	0%	Aug 26, 2024
CVE-2024-5725: Improper Neutralization of Special Elements used in an SQL Command	8.8 High	N/A	51%	Aug 21, 2024
CVE-2024-5723: Improper Neutralization of Special Elements used in an SQL Command	8.8 High	N/A	81%	Aug 21, 2024
CVE-2024-41937: Improper Neutralization of Input During Web Page Generation	6.1 Medium	N/A	1%	Aug 21, 2024
CVE-2024-7885: Concurrent Execution using Shared Resource with Improper Synchronization	7.5 High	N/A	3%	Aug 21, 2024
CVE-2023-49198: Files or Directories Accessible to External Parties	7.5 High	N/A	0%	Aug 21, 2024
CVE-2024-22281: Exposure of Resource to Wrong Sphere	7.5 High	N/A	0%	Aug 20, 2024
CVE-2024-38175: Improper Access Control	9.6 Critical	N/A	6%	Aug 20, 2024
CVE-2024-43202: Improper Control of Generation of Code	9.8 Critical	N/A	4%	Aug 20, 2024

Rows per page

1726-1750 of 4467

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business