Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)Blog ↗CVE details

CVE-2026-97229:Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-112032: aircheng-org iWebShop-5: A vulnerability was identified in aircheng-org iWebShop-5 up to 5.16	4.7 Medium	5.1 Medium	N/A	Oct 18, 2026
CVE-2026-112031: Chamilo LMS: A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1	3.5 Low	5.1 Medium	N/A	Oct 18, 2026
CVE-2026-112112: nic BIRD: An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject…	N/A	2.3 Low	N/A	Oct 18, 2026
CVE-2026-112111: Bootstrap Shortcodes project Bootstrap Shortcodes: The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the…	N/A	5.1 Medium	N/A	Oct 18, 2026
CVE-2026-112029: diem-project diem: A vulnerability has been found in diem-project diem up to 5.1.3	2.5 Low	1.1 Low	N/A	Oct 18, 2026
CVE-2026-112028: light0011 cms: A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930	6.5 Medium	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-112027: light0011 cms: A vulnerability was detected in light0011 cms…	5.3 Medium	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-112026: light0011 cms: A security vulnerability has been detected in light0011 cms…	3.7 Low	2.9 Low	N/A	Oct 18, 2026
CVE-2026-108519: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-112030: diem-project diem: A vulnerability was found in diem-project diem up to 5.1.3	6.3 Medium	5.3 Medium	N/A	Oct 18, 2026
CVE-2026-112025: light0011 cms: A weakness has been identified in light0011 cms…	7.3 High	5.5 Medium	N/A	Oct 18, 2026
CVE-2026-97859: Gitea: Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred,…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-97204: Gitea: Deleting a label compared the ID of the repository in the request against the organization ID of organization labels,…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-110494: Gitea: Adding attachments to a release checked the repository and release of an attachment but not whether it was already…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-110324: Gitea: The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-110311: Gitea: Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-109844: Gitea: `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-109553: Gitea: Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-107686: Gitea: The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-107618: Gitea: `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection,…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-105964: Gitea: The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limit	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-105661: Gitea: Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home…	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-104627: Gitea: The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without…	N/A	N/A	N/A	Oct 18, 2026
CVE-2024-4457: WSO2: The Management Console fails to properly validate input related to the configuration of JDBC user stores	N/A	N/A	N/A	Oct 18, 2026
CVE-2026-111992: itsmeravitejak Online-Examination-System: A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449	6.3 Medium	2.1 Low	N/A	Oct 18, 2026

Rows per page

1-25 of 406803

›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business