Rapid7 Vulnerability & Exploit Database

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)

Critical out-of-bounds write in the Node.js Brotli decoder

and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Critical out-of-bounds write in the Node.js Brotli decoder

and CVE-2026-109619: Critical Unauthenticated Remote Code Execution in PHP

Rapid7 Analysis: NetScaler intrusions chaining CVE-2026-88771 and CVE-2026-88779

Critical BeyondTrust Remote Support Authentication Bypass Exploited in the Wild

Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

Enter at least 3 characters to CVEs.

CVE-2026-8697: Authentication Bypass Using an Alternate Path or Channel

CVE-2026-44461: Improper Neutralization of Special Elements used in an OS Command

CVE-2026-24444: Use of Hard-coded Credentials

CVE-2026-49238: Improper Limitation of a Pathname to a Restricted Directory

CVE-2026-49237: Incorrect Default Permissions

CVE-2026-45570: Improper Encoding or Escaping of Output

CVE-2026-45361: Key Exchange without Entity Authentication

CVE-2026-40610: Improper Link Resolution Before File Access

CVE-2025-46371: Use of a Broken or Risky Cryptographic Algorithm

CVE-2026-46598: Improper Validation of Array Index

CVE-2026-46597: Incorrect Type Conversion or Cast

CVE-2026-42508: Improper Certificate Validation

CVE-2026-39835: Improper Certificate Validation

CVE-2026-39834: Integer Overflow or Wraparound

CVE-2026-39832: Deserialization of Untrusted Data

CVE-2026-39831: Undefined Security Weakness

CVE-2026-39827: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

CVE-2026-39829: Improper Verification of Cryptographic Signature

CVE-2026-39830: Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2026-39828: Improper Certificate Validation

CVE-2026-24218: Use of Hard-coded Cryptographic Key