Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-120340: mathurvishal CloudClassroom-PHP-Project: A weakness has been identified in mathurvishal CloudClassroom-PHP-Project	3.7 Low	2.9 Low	N/A	Nov 2, 2026
CVE-2026-120339: mathurvishal CloudClassroom-PHP-Project: A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project	4.3 Medium	2.1 Low	N/A	Nov 2, 2026
CVE-2026-120337: VStarcam O-KAM SuperIPCam: A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.32	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-120336: VStarcam O-KAM Client: A vulnerability was found in VStarcam O-KAM Client 1.3.3.32	7.3 High	5.5 Medium	N/A	Nov 2, 2026
CVE-2026-68591: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a permissions bypass	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68590: MediaTek, Inc. MediaTek chipset: In ip_stack, there is a possible out of bounds read due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68589: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-68588: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20600: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to a logic error	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20599: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a missing permission check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20598: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to an integer overflow	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20597: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20596: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20595: MediaTek, Inc. MediaTek chipset: In neuropilot, there is a possible out of bounds write due to a missing bounds check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20594: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds check	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20593: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to improper input validation	5.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20592: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible information disclosure due to side channel information disclosure	4.1 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20591: MediaTek, Inc. MediaTek chipset: In GPU pdma, there is a possible escalation of privilege due to a missing permission check	8.4 High	N/A	N/A	Nov 2, 2026
CVE-2026-20590: MediaTek, Inc. MediaTek chipset: In display, there is a possible system crash due to a logic error	4.4 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20585: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check	7.5 High	N/A	N/A	Nov 2, 2026
CVE-2026-20584: MediaTek, Inc. MediaTek chipset: In usb, there is a possible memory corruption due to a missing bounds check	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20583: MediaTek, Inc. MediaTek chipset: In usb, there is a possible system crash due to use after free	4.4 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20582: MediaTek, Inc. MediaTek chipset: In usb, there is a possible memory corruption due to double free	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20581: MediaTek, Inc. MediaTek chipset: In usb, there is a possible memory corruption due to use after free	6.7 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-20580: MediaTek, Inc. MediaTek chipset: In usb, there is a possible system crash due to use after free	4.4 Medium	N/A	N/A	Nov 2, 2026

25 rows per page

201-225 of 574114

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business