Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-105606: joomlaboat.com Custom Tables extension for Joomla: Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauthenticated…	N/A	9.5 Critical	N/A	Nov 2, 2026
CVE-2026-105605: dj-extensions.com DJ-Classifieds extension for Joomla: Joomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3 -…	N/A	5.3 Medium	N/A	Nov 2, 2026
CVE-2026-105604: dj-extensions.com DJ-Classifieds extension for Joomla: Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension…	N/A	9.3 Critical	N/A	Nov 2, 2026
CVE-2026-105603: dj-extensions.com DJ-Classifieds extension for Joomla: Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla…	N/A	9.4 Critical	N/A	Nov 2, 2026
CVE-2026-120630: CrewAI: CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-120627: Private Internet Access Firefox extension: The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-120416: AndyFactory newspaper4k: A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6	5.3 Medium	6.9 Medium	N/A	Nov 2, 2026
CVE-2026-119085: AWS virtual-engineering-workbench: Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual…	8.8 High	9.4 Critical	N/A	Nov 2, 2026
CVE-2026-117068: n/a: An integer underflow vulnerability in the NAS decoder of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-117067: n/a: An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows…	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-111048: FOSSBilling: FOSSBilling is an open source billing and client-management platform	N/A	8.4 High	N/A	Nov 2, 2026
CVE-2026-106808: n/a: OpenAirInterface Core Network v2.2.1 has a stack-based buffer overflow vulnerability in the OAI CN5G UDM Nudm_UEAU…	7.5 High	N/A	N/A	Nov 2, 2026
CVE-2026-106806: n/a: A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server	N/A	N/A	N/A	Nov 2, 2026
CVE-2024-12139: WSO2: The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters…	4.3 Medium	N/A	N/A	Nov 2, 2026
CVE-2026-88811: SUSE Rancher: Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to…	9.1 Critical	N/A	N/A	Nov 2, 2026
CVE-2026-88810: SUSE Rancher: A privilege escalation issue was discovered in Rancher Manager's role-based access control	7.2 High	N/A	N/A	Nov 2, 2026
CVE-2026-120596: Ethernut / egnite GmbH Nut/Net TCP/IP Stack: A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack…	7.5 High	N/A	N/A	Nov 2, 2026
CVE-2026-119301: AWS aws-sdk-pandas: Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS…	7.9 High	5.0 Medium	N/A	Nov 2, 2026
CVE-2026-106807: n/a: A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-106804: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn module	7.5 High	N/A	N/A	Nov 2, 2026
CVE-2026-106803: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf module	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-105769: chainguard kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…	9.3 Critical	N/A	N/A	Nov 2, 2026
CVE-2026-65059: Improper Handling of Highly Compressed Data	N/A	N/A	N/A	Nov 2, 2026
CVE-2026-94290: SUSE Rancher: SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…	9.1 Critical	N/A	N/A	Nov 2, 2026

25 rows per page

201-225 of 574114

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business