Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-99099: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99098: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99097: Linux: In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99096: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99095: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99094: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99093: Linux: In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99092: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99091: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99090: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99089: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-99088: Linux: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header…	N/A	N/A	N/A	Oct 26, 2026
CVE-2026-90885: Apache Software Foundation Apache Camel: Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component	7.5 High	N/A	N/A	Oct 26, 2026
CVE-2026-77062: boneIO: The boneIO Black web interface lacks proper clickjacking protections	N/A	6.9 Medium	N/A	Oct 26, 2026
CVE-2026-94386: Apache Software Foundation Apache Camel: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component	4.8 Medium	N/A	N/A	Oct 26, 2026
CVE-2026-77061: boneIO: boneIO Black directly excludes several API endpoints from the authentication	N/A	5.3 Medium	N/A	Oct 26, 2026
CVE-2026-77060: boneIO black_debian_images: boneIO black_debian_images stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable…	N/A	6.8 Medium	N/A	Oct 26, 2026
CVE-2026-77059: boneIO: boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in…	N/A	8.8 High	N/A	Oct 26, 2026
CVE-2026-77058: boneIO: boneIO Black is vulnerable to Cross-Site Request Forgery (CSRF) on all state-changing API endpoints because it lacks…	N/A	5.1 Medium	N/A	Oct 26, 2026
CVE-2026-77057: boneIO: boneIO Black does not limit authentication attempts on its web interface (POST /api/login) or SSH service, and does not…	N/A	2.3 Low	N/A	Oct 26, 2026
CVE-2026-77056: boneIO black_debian_images: boneIO black_debian_images ships with a Mosquitto MQTT broker that uses the same default credentials on all devices	N/A	7.1 High	N/A	Oct 26, 2026
CVE-2026-77055: boneIO black_debian_images: boneIO black_debian_images gives the boneio service account excessive privileges, including full passwordless sudo…	N/A	9.3 Critical	N/A	Oct 26, 2026
CVE-2026-77054: boneIO: boneIO Black stores passwords, including the MQTT broker and web panel passwords, in cleartext	N/A	6.9 Medium	N/A	Oct 26, 2026
CVE-2026-77053: boneIO: boneIO Black firmware ships with authentication disabled by default	N/A	8.7 High	N/A	Oct 26, 2026
CVE-2026-77052: boneIO: boneIO Black exposes a Node-RED instance without authentication at the /nodered/ path through a Caddy reverse proxy	N/A	8.7 High	N/A	Oct 26, 2026

Rows per page

1-25 of 546512

›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business