Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-96406: Eclipse Foundation Eclipse ThreadX - USBX: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of…	4.9 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-93446: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittently	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-91041: Eclipse Foundation Eclipse ThreadX - FileX: Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log…	7.8 High	N/A	N/A	Oct 20, 2026
CVE-2026-88041: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-80353: Apache Software Foundation Apache Tomcat: Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-74049: Apache Software Foundation Apache Tomcat: Execution After Redirect (EAR) vulnerability in Apache Tomcat	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-74048: Apache Software Foundation Apache Tomcat: Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113396: DrayTek Vigor2960: A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113395: DrayTek Vigor2960: A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113394: DrayTek Vigor2960: A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113393: DrayTek Vigor2960: A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218	6.3 Medium	2.1 Low	N/A	Oct 20, 2026
CVE-2026-103119: Apache Software Foundation Apache Tomcat: Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-101356: Apache Software Foundation Apache Tomcat: Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-101296: Apache Software Foundation Apache Tomcat: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a…	N/A	9.1 Critical	N/A	Oct 20, 2026
CVE-2026-34485: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-34484: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113620: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not…	9.8 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-113619: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template…	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-113470: Mozilla: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed…	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113401: Mozilla: Denial-of-service in the PDF Viewer component	6.5 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113400: Mozilla: Uninitialized memory in the Audio/Video: cubeb component	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113399: Mozilla: Incorrect boundary conditions in the SVG component	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113392: DrayTek Vigor2960: A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113391: DrayTek Vigor2960: A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-113390: DrayTek Vigor2960: A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026

Rows per page

1726-1750 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business