Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2024-29736: Server-Side Request Forgery (SSRF)	9.1 Critical	N/A	0%	Jul 19, 2024
CVE-2024-40898: Server-Side Request Forgery (SSRF)	7.5 High	N/A	0%	Jul 18, 2024
CVE-2024-40725: Exposure of Resource to Wrong Sphere	5.3 Medium	N/A	27%	Jul 18, 2024
CVE-2024-31411: Unrestricted Upload of File with Dangerous Type	8.8 High	N/A	2%	Jul 17, 2024
CVE-2024-31979: Server-Side Request Forgery (SSRF)	4.3 Medium	N/A	1%	Jul 17, 2024
CVE-2024-30471: Time-of-check Time-of-use (TOCTOU) Race Condition	3.7 Low	N/A	1%	Jul 17, 2024
CVE-2024-39877: Improper Control of Generation of Code	8.8 High	N/A	0%	Jul 17, 2024
CVE-2024-39863: Improper Neutralization of Input During Web Page Generation	5.4 Medium	N/A	0%	Jul 17, 2024
CVE-2024-39887: Improper Neutralization of Special Elements used in an SQL Command	4.3 Medium	N/A	60%	Jul 16, 2024
CVE-2023-49566: Deserialization of Untrusted Data	8.8 High	N/A	1%	Jul 15, 2024
CVE-2023-46801: Deserialization of Untrusted Data	8.8 High	N/A	4%	Jul 15, 2024
CVE-2023-41916: Files or Directories Accessible to External Parties	6.5 Medium	N/A	0%	Jul 15, 2024
CVE-2024-3653: Missing Release of Memory after Effective Lifetime	5.3 Medium	N/A	2%	Jul 8, 2024
CVE-2024-5971: Uncontrolled Recursion	7.5 High	N/A	3%	Jul 8, 2024
CVE-2024-37389: Improper Neutralization of Input During Web Page Generation	4.6 Medium	N/A	1%	Jul 8, 2024
CVE-2024-39884: Undefined Security Weakness	6.2 Medium	N/A	0%	Jul 4, 2024
CVE-2024-34750: Improper Handling of Exceptional Conditions	7.5 High	N/A	17%	Jul 3, 2024
CVE-2024-39573: Improper Input Validation	7.5 High	N/A	3%	Jul 1, 2024
CVE-2024-38477: NULL Pointer Dereference	7.5 High	N/A	1%	Jul 1, 2024
CVE-2024-38476: Inclusion of Functionality from Untrusted Control Sphere	9.8 Critical	N/A	3%	Jul 1, 2024
CVE-2024-38475: Improper Encoding or Escaping of Output	9.1 Critical	N/A	94%	Jul 1, 2024
CVE-2024-38474: Improper Encoding or Escaping of Output	9.8 Critical	N/A	1%	Jul 1, 2024
CVE-2024-38473: Improper Encoding or Escaping of Output	8.1 High	N/A	88%	Jul 1, 2024
CVE-2024-38472: Server-Side Request Forgery (SSRF)	7.5 High	N/A	90%	Jul 1, 2024
CVE-2024-24749: Improper Limitation of a Pathname to a Restricted Directory	7.5 High	N/A	0%	Jul 1, 2024

Rows per page

1776-1800 of 4467

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business