Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-111058: mljar mercury: Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards	9.8 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111057: mljar mercury: Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards	10.0 Critical	N/A	N/A	Oct 19, 2026
CVE-2026-111056: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-111053: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	6.9 Medium	N/A	Oct 19, 2026
CVE-2026-111046: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	2.3 Low	N/A	Oct 19, 2026
CVE-2026-111045: anshupriyan cli-bridge: CLI Bridge provides filesystem access within a workspace root	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-109433: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an authorization bypass vulnerability in the Cockpit…	6.5 Medium	6.0 Medium	N/A	Oct 19, 2026
CVE-2026-109432: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains an expression injection vulnerability where…	9.8 Critical	9.3 Critical	N/A	Oct 19, 2026
CVE-2026-109431: Camunda Camunda 7: Camunda 7.24.0 before 7.24.14 and 7.23.0 before 7.23.17 contains a missing authorization check vulnerability in…	8.1 High	8.6 High	N/A	Oct 19, 2026
CVE-2026-107571: Progressive Robot Ltd hMailServer: Incorrect default permissions in the Windows installer of Progressive Robot hMailServer 6.0.0 through 6.3.6 allow a…	7.8 High	N/A	N/A	Oct 19, 2026
CVE-2026-107569: Progressive Robot Ltd hMailServer: Unchecked input for a loop condition in Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-107568: Progressive Robot Ltd hMailServer: Missing authorization in the Sieve notify action (6.2.22 through 6.3.6) and in the mail-rule Reply action (6.0.0…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-107567: Progressive Robot Ltd hMailServer: Use of a less trusted source in the DKIM signing of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…	7.5 High	N/A	N/A	Oct 19, 2026
CVE-2026-107566: Progressive Robot Ltd hMailServer: Missing authorization in the Sieve editheader action (6.2.22 through 6.3.6) and in the mail-rule Set header value…	6.5 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-107081: n/a: SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints…	N/A	N/A	N/A	Oct 19, 2026
CVE-2026-103038: StreamSoft PingTools Network Utilities: PingTools Network Utilities 4.64 contains an OS command injection vulnerability in the Host field of a Watcher ICMP…	N/A	8.6 High	N/A	Oct 19, 2026
CVE-2026-86375: Dell: Dell Application Installer, versions prior to 26.09.0.1, contain a Missing Encryption of Sensitive Data vulnerability	6.2 Medium	N/A	N/A	Oct 19, 2026
CVE-2026-112329: Automattic Sensei LMS: The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the legacy…	4.3 Medium	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112328: Automattic Sensei LMS: The Sensei LMS WordPress plugin before 4.26.4 contains a broken access control vulnerability in the add_new_module_term…	4.3 Medium	5.3 Medium	N/A	Oct 19, 2026
CVE-2026-112151: vraj404 Criminal Management System: A weakness has been identified in vraj404 Criminal Management System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112150: vraj404 Criminal-Management-System: A security flaw has been discovered in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112149: vraj404 Criminal-Management-System: A vulnerability was identified in vraj404 Criminal-Management-System up to 2808d057e7ddc5295519a487365b0cacfd0ba8c4	7.3 High	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-112147: ai-genius-automations octoally: A vulnerability was found in ai-genius-automations octoally up to 1.0.87	5.3 Medium	5.5 Medium	N/A	Oct 19, 2026
CVE-2026-8168: qt: Uncontrolled recursion in the SVG parser and renderer of the Qt SVG module (QtSvg) in Qt Group Qt allows attackers to…	N/A	7.1 High	N/A	Oct 19, 2026
CVE-2026-112296: sunkaifei FlyCms: FlyCms through commit edfdf724 contains a default credentials vulnerability that allows unauthenticated remote…	9.8 Critical	9.3 Critical	N/A	Oct 19, 2026

Rows per page

176-200 of 409174

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business