Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-74049: Apache Software Foundation Apache Tomcat: Execution After Redirect (EAR) vulnerability in Apache Tomcat	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-74048: Apache Software Foundation Apache Tomcat: Not Failing Securely ('Failing Open') vulnerability in Apache Tomcat	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113396: DrayTek Vigor2960: A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113395: DrayTek Vigor2960: A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113394: DrayTek Vigor2960: A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113393: DrayTek Vigor2960: A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 8218	6.3 Medium	2.1 Low	N/A	Oct 20, 2026
CVE-2026-103119: Apache Software Foundation Apache Tomcat: Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-101356: Apache Software Foundation Apache Tomcat: Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous…	9.1 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-101296: Apache Software Foundation Apache Tomcat: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a…	N/A	9.1 Critical	N/A	Oct 20, 2026
CVE-2026-34485: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-34484: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the…	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113620: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not…	9.8 Critical	N/A	N/A	Oct 20, 2026
CVE-2026-113619: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template…	7.5 High	N/A	N/A	Oct 20, 2026
CVE-2026-113470: Mozilla: Mozilla blocked compromised intermediate eMudhra certificates via OneCRL on the 17th of October which was distributed…	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113401: Mozilla: Denial-of-service in the PDF Viewer component	6.5 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113400: Mozilla: Uninitialized memory in the Audio/Video: cubeb component	5.4 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-113399: Mozilla: Incorrect boundary conditions in the SVG component	N/A	N/A	N/A	Oct 20, 2026
CVE-2026-113392: DrayTek Vigor2960: A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218	7.4 High	2.1 Low	N/A	Oct 20, 2026
CVE-2026-113391: DrayTek Vigor2960: A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-113390: DrayTek Vigor2960: A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 8218	9.9 Critical	8.6 High	N/A	Oct 20, 2026
CVE-2026-105941: Red Hat streams for Apache Kafka 3: The Azure Key Vault KMS provider in Kroxylicious accepts an untrusted vaultName from wire-deserialized EDEK bytes…	8.1 High	N/A	N/A	Oct 20, 2026
CVE-2026-18205: Ticimax Informatics Technologies Inc. Ticimax E-Commerce Platform: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ticimax…	6.1 Medium	N/A	N/A	Oct 20, 2026
CVE-2026-14933: Unblu inc. Unblu Spark: Cross-site scripting in the embedded co-browsing feature in Unblu inc	N/A	8.6 High	N/A	Oct 20, 2026
CVE-2026-113583: cypht-org cypht: Cypht webmail 2.0.0 through 2.12.2 contains a DOM-based cross-site scripting vulnerability that allows remote attackers…	6.1 Medium	5.3 Medium	N/A	Oct 20, 2026
CVE-2026-113496: Red Hat: A flaw was found in cockpit-machines	5.0 Medium	N/A	N/A	Oct 20, 2026

Rows per page

1726-1750 of 407346

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business