Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)Blog ↗CVE details

CVE-2026-111357:Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoder

Blog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Blog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-111497:Critical out-of-bounds write in the Node.js Brotli decoderBlog ↗CVE details

CVE-2026-109618:and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHPBlog ↗CVE details

CVE-2026-88771:Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779Blog ↗CVE details

CVE-2026-102764:Critical BeyondTrust Remote Support Authentication Bypass Exploited in the WildBlog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-122189: OpenPPL ppl.nn: A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5	6.3 Medium	5.3 Medium	N/A	Nov 5, 2026
CVE-2026-122188: DeepGraphLearning KnowledgeGraphEmbedding: A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a	6.3 Medium	5.3 Medium	N/A	Nov 5, 2026
CVE-2026-48173: Samsung Semiconductor: In the NAS message handler, improper validation of the length field in NAS message causes memory corruption	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48174: Samsung Semiconductor: In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-35494: Samsung Semiconductor: In the baseband, memory corruption during NAS packet processing can cause a denial of service.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48175: Samsung Semiconductor: Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48178: Samsung Semiconductor: Out of bound access in PPC due to race condition in global variable access	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48186: Samsung Semiconductor: Improper handling of messages before AS security activation can cause unexpected behavior	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68993: Samsung Semiconductor: A double free vulnerability in NPU driver due to improper pointer management (940)	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68994: Samsung Semiconductor: A double free vulnerability in NPU driver due to improper pointer management (941)	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-48183: Samsung Semiconductor: Improper permission handling during buffer operations allows untrusted applications to create memory mappings with…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68984: Samsung Semiconductor: In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69005: Samsung Semiconductor: Integer overflow in NPU driver parameter processing due to insufficient bounds checking.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68985: Samsung Semiconductor: In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69006: Samsung Semiconductor: Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69068: Samsung Semiconductor: Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69025: Samsung Semiconductor: In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write,…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68990: Samsung Semiconductor: In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption,…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-68991: Samsung Semiconductor: In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69002: Samsung Semiconductor: Incorrect authorization in Samsung framework services due to missing permission checks	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69066: Samsung Semiconductor: Memory corruption in GPU driver due to improper validation of VMID reservation.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69050: Samsung Semiconductor: Out-of-bounds memory access in a device driver due to improper resource state tracking.	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69043: Samsung Semiconductor: In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory…	N/A	N/A	N/A	Nov 5, 2026
CVE-2026-69044: Samsung Semiconductor: In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.	N/A	N/A	N/A	Nov 5, 2026
CVE-2025-66366: Samsung Semiconductor: Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash	N/A	N/A	N/A	Nov 5, 2026

25 rows per page

1-25 of 418286

›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business