Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-122146: 101arrowz fflate: A weakness has been identified in 101arrowz fflate up to 0.8.3	7.3 High	5.5 Medium	0%	Nov 5, 2026
CVE-2026-122144: nliautaud pico-content-editor: A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af	4.3 Medium	2.1 Low	0%	Nov 5, 2026
CVE-2026-122052: n/a laspy: A vulnerability has been found in laspy up to 2.7.0	4.3 Medium	5.3 Medium	0%	Nov 5, 2026
CVE-2026-109849: NTT DATA INTELLILINK Corporation Hinemos: Incorrect privilege assignment issue exists in Hinemos	6.5 Medium	7.1 High	0%	Nov 5, 2026
CVE-2026-122051: Edimax BR-6208AC: A flaw has been found in Edimax BR-6208AC 1.32	10.0 Critical	9.3 Critical	3%	Nov 5, 2026
CVE-2026-122050: Campcodes Complete Sales and Inventory System with Credit Management: A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.0	7.3 High	5.5 Medium	0%	Nov 5, 2026
CVE-2026-122049: Campcodes Bitcoin Wallet System: A flaw has been found in Campcodes Bitcoin Wallet System 1.0	3.7 Low	2.9 Low	0%	Nov 5, 2026
CVE-2026-97702: openedx openedx-platform: Open edX Platform enables the authoring and delivery of online learning at any scale	5.3 Medium	N/A	0%	Nov 4, 2026
CVE-2026-86041: mayswind ezbookkeeping: ezBookkeeping is an open source, self-hosted personal finance application	N/A	5.3 Medium	0%	Nov 4, 2026
CVE-2026-77372: VeraCrypt: VeraCrypt provides disk encryption with strong security based on TrueCrypt	N/A	8.8 High	0%	Nov 4, 2026
CVE-2026-76892: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animations	N/A	8.7 High	0%	Nov 4, 2026
CVE-2026-76826: tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animations	N/A	7.5 High	0%	Nov 4, 2026
CVE-2026-62662: pocket-id: Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services	7.7 High	N/A	0%	Nov 4, 2026
CVE-2026-62365: wazuh: Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads	5.3 Medium	N/A	0%	Nov 4, 2026
CVE-2026-57152: glpi-project glpi: GLPI is a free asset and IT management software package	N/A	7.1 High	0%	Nov 4, 2026
CVE-2026-54384: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an authentication bypass vulnerability that allows remote attackers to…	9.8 Critical	9.3 Critical	1%	Nov 4, 2026
CVE-2026-54383: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an excessive data exposure vulnerability that allows any authenticated…	6.5 Medium	7.1 High	0%	Nov 4, 2026
CVE-2026-54382: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an improper access control vulnerability in its Cognito-issued AWS role…	7.7 High	6.3 Medium	0%	Nov 4, 2026
CVE-2026-54381: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows…	7.5 High	8.7 High	0%	Nov 4, 2026
CVE-2026-53631: glpi-project glpi: GLPI is a free asset and IT management software package	N/A	5.3 Medium	0%	Nov 4, 2026
CVE-2026-52848: glpi-project glpi: GLPI is a free asset and IT management software package	N/A	9.2 Critical	0%	Nov 4, 2026
CVE-2026-47678: glpi-project glpi: GLPI is a free asset and IT management software package	N/A	8.7 High	0%	Nov 4, 2026
CVE-2026-122299: jelmer dulwich: Dulwich before 1.2.20 contains a commit object parsing vulnerability where the read path in _parse_commit resolves a…	8.8 High	8.6 High	0%	Nov 4, 2026
CVE-2026-122048: Campcodes Division Regional Athletic Meet Game Result Matrix System: A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.1	7.3 High	5.5 Medium	0%	Nov 4, 2026
CVE-2026-122047: Campcodes Complete Advance Loan Management System: A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.0	7.3 High	5.5 Medium	0%	Nov 4, 2026

25 rows per page

176-200 of 544433

‹›

MDR Buyer's Guide

Global Threat Landscape Report