Rapid7 Vulnerability & Exploit Database

Emergent Threat6

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)Blog ↗CVE details

CVE-2026-104935:Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLab

Blog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian products

Blog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)

Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772

Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APM

Blog ↗CVE details

CVE-2026-97229:Critical Unauthenticated Remote Code Execution in GitLabBlog ↗CVE details

CVE-2026-21589:Critical unauthenticated arbitrary file access in Atlassian productsBlog ↗CVE details

CVE-2026-76504:Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)Blog ↗CVE details

CVE-2026-88771:Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772Blog ↗CVE details

CVE-2026-94127:Critical Unauthenticated RCE in F5 BIG-IP APMBlog ↗CVE details

Title			EitW	Modules

Title
CVE-2026-110833: FreeRDP: FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR…	5.9 Medium	8.2 High	N/A	Oct 14, 2026
CVE-2026-110832: FreeRDP: FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows…	6.5 Medium	7.1 High	N/A	Oct 14, 2026
CVE-2026-110831: FreeRDP: FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an…	4.3 Medium	5.3 Medium	N/A	Oct 14, 2026
CVE-2026-110830: FreeRDP: FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server…	5.9 Medium	8.2 High	N/A	Oct 14, 2026
CVE-2026-110829: FreeRDP: FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets…	6.5 Medium	7.1 High	N/A	Oct 14, 2026
CVE-2026-110807: sgl-project SGLang: A weakness has been identified in sgl-project SGLang up to 0.5.19	4.3 Medium	2.1 Low	N/A	Oct 14, 2026
CVE-2026-107795: TP-Link Systems Inc. Omada Software Controller: Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative…	N/A	7.5 High	N/A	Oct 14, 2026
CVE-2026-106485: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 14, 2026
CVE-2026-106068: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 14, 2026
CVE-2026-106006: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 14, 2026
CVE-2026-105627: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.	N/A	N/A	N/A	Oct 14, 2026
CVE-2026-110816: ljharb qs: ### Summary `qs.stringify` with `arrayFormat: 'comma'` throws `TypeError: Cannot convert object to primitive value`…	5.3 Medium	6.3 Medium	N/A	Oct 14, 2026
CVE-2026-110698: n/a Praat: A security vulnerability has been detected in Praat up to 7.0.02	6.3 Medium	2.1 Low	N/A	Oct 14, 2026
CVE-2026-110696: itsmeravitejak Online-Examination-System: A weakness has been identified in itsmeravitejak Online-Examination-System up to…	5.3 Medium	5.5 Medium	N/A	Oct 14, 2026
CVE-2026-110695: turboderp ExLlamaV2: A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2	6.3 Medium	2.1 Low	N/A	Oct 14, 2026
CVE-2026-108337: Hitachi Vantara Remot Ops Agent: An administrator could retrieve the password reset code for any user and take over the account	N/A	7.4 High	N/A	Oct 14, 2026
CVE-2026-108336: Hitachi Vantara Remot Ops Agent: When the default self-signed certificate is used, an attacker could gain administrative access to the application	N/A	9.1 Critical	N/A	Oct 14, 2026
CVE-2026-108335: Hitachi Vantara Remote Ops Agent: When the password reset functionality is enabled, and email is configured, an attacker could take over any account…	N/A	9.1 Critical	N/A	Oct 14, 2026
CVE-2026-102298: TP-Link System Inc. Omada Software Controller (Windows): In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check	N/A	7.5 High	N/A	Oct 14, 2026
CVE-2026-96540: SonicWall Network Security Manager (NSM): An improper access control vulnerability has been identified in the SonicWall Network Security Manager (NSM) on-prem in…	N/A	N/A	N/A	Oct 14, 2026
CVE-2026-77427: error311 FileRise: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations	5.9 Medium	N/A	N/A	Oct 14, 2026
CVE-2026-71854: OpenAEV-Platform openaev: OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation…	8.2 High	N/A	N/A	Oct 14, 2026
CVE-2026-69194: error311 FileRise: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations	4.8 Medium	N/A	N/A	Oct 14, 2026
CVE-2026-69193: error311 FileRise: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations	6.5 Medium	N/A	N/A	Oct 14, 2026
CVE-2026-69191: error311 FileRise: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations	5.4 Medium	N/A	N/A	Oct 14, 2026

Rows per page

326-350 of 558706

‹›

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business