Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-79831: Hewlett Packard Enterprise HPE NonStop Posix User Threads: A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.	6.6 Medium	N/A	N/A	Oct 15, 2026
CVE-2026-79830: Hewlett Packard Enterprise HPE NonStop Kernel Level Thread Model Lib: A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary…	6.6 Medium	N/A	N/A	Oct 15, 2026
CVE-2026-17525: ABB My Control System: Incomplete cleanup vulnerability in ABB My Control System	5.2 Medium	5.1 Medium	N/A	Oct 15, 2026
CVE-2026-109695: WPManageNinja FluentCart: Insertion of Sensitive Information Into Sent Data vulnerability in WPManageNinja FluentCart fluent-cart allows Retrieve…	7.5 High	N/A	N/A	Oct 15, 2026
CVE-2026-109694: WP ManageNinja LLC Fluent CRM: Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege…	9.8 Critical	N/A	N/A	Oct 15, 2026
CVE-2026-108498: bannersky BSK PDF Manager: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK PDF…	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-108497: TMS Amelia: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia…	9.3 Critical	N/A	N/A	Oct 15, 2026
CVE-2026-108491: Everest Forms: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms…	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-79829: Hewlett Packard Enterprise HPE NonStop HTTP WEBSERVER: A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.	8.2 High	N/A	N/A	Oct 15, 2026
CVE-2026-79828: Hewlett Packard Enterprise HPE NonStop Debug Utilities: A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially…	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-79827: Hewlett Packard Enterprise HPE NonStop Inspect Subsystem: A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially…	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-79826: Hewlett Packard Enterprise HPE NonStop OCAX: A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-79825: Heap-based Buffer Overflow	7.1 High	N/A	N/A	Oct 15, 2026
CVE-2026-79824: A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a .	8.0 High	N/A	N/A	Oct 15, 2026
CVE-2026-53882: QNAP Systems Inc. Virtualization Station: An improper link resolution before file access ('link following') vulnerability has been reported to affect…	N/A	8.7 High	N/A	Oct 15, 2026
CVE-2026-50619: QNAP Systems Inc. Qsirch: A path traversal vulnerability has been reported to affect Qsirch	N/A	9.3 Critical	N/A	Oct 15, 2026
CVE-2026-50612: QNAP Systems Inc. QuMagie: An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie	N/A	9.4 Critical	N/A	Oct 15, 2026
CVE-2026-47790: QNAP Systems Inc. QuFTP Service: A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service	N/A	6.3 Medium	N/A	Oct 15, 2026
CVE-2026-47786: QNAP Systems Inc. HybridDesk Station: An OS command injection vulnerability has been reported to affect HybridDesk Station	N/A	9.3 Critical	N/A	Oct 15, 2026
CVE-2026-44084: QNAP Systems Inc. Video Station: An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station	N/A	8.7 High	N/A	Oct 15, 2026
CVE-2026-41545: QNAP Systems Inc. QuMagie: A relative path traversal vulnerability has been reported to affect QuMagie	N/A	8.6 High	N/A	Oct 15, 2026
CVE-2026-41541: QNAP Systems Inc. Qsync Central: An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central	N/A	5.3 Medium	N/A	Oct 15, 2026
CVE-2026-39997: QNAP Systems Inc. HybridDesk Station: A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station	N/A	8.9 High	N/A	Oct 15, 2026
CVE-2026-39991: QNAP Systems Inc. Notes Station 3: A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3	N/A	4.8 Medium	N/A	Oct 15, 2026
CVE-2026-39989: QNAP Systems Inc. Download Station: A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station	N/A	5.3 Medium	N/A	Oct 15, 2026

Rows per page

26-50 of 443752

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business