rapid7

Critical vulnerabilities in N-able N-central prompt hosted shutdown

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report On November 9, 2026, N-able announced that it was responding to the public disclosure of critical ...
rapid7

CVE-2026-121355: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation

Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain elevated access to sensitive ...
rapid7

Ivanti Endpoint Manager Mobile: CVE-2026-105425

OS command injection in Ivanti Sentry before versions 11.0.0, 10.8.3, and 10.7.4 as well as in Ivanti EPMM before versions 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker ...
rapid7

CVE-2026-121267: TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote: Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies ...

Incorrect default permissions vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-remote allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects ...
rapid7

CVE-2026-123179: Ivanti Sentry: An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Ivanti Sentry before versions…

CVE-2026-123179: Ivanti Sentry: An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0,…. View severity, references, and remediation ...
rapid7

CVE-2026-97002: Microsoft: Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.

CVE-2026-97002: Microsoft: Out-of-bounds read in Windows VMSwitch allows an authorized attacker to elevate privileges locally.. View severity, references, and remediation details from Rapid7.
rapid7

CVE-2026-67176: Chargemap: Chargemap contains an open redirect vulnerability in the authentication login endpoint

Chargemap contains an open redirect vulnerability in the authentication login endpoint. A remote, unauthenticated attacker could send a crafted URL to a victim and redirect them to an attacker ...
rapid7

CVE-2026-91754: Hitachi Hitachi Dynamic Link Manager for VMware: Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware

CVE-2026-91754: Hitachi Hitachi Dynamic Link Manager for VMware: Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware. View severity, references, and remediation ...
rapid7

CVE-2026-86336: Apache Software Foundation Apache TomEE: Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods…

Apache TomEE running on JDK 21 or later skips EJB method authorization checks, allowing callers to invoke EJB methods without the configured access restrictions being enforced. Users are recommended ...
rapid7

CVE-2026-124939: Mozilla Firefox: JIT miscompilation in the JavaScript Engine: JIT component

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 160 and Firefox ESR 153.7. With curated Threat Intelligence, you can see which vulnerabilities truly ...
rapid7

CVE-2026-86579: Uncontrolled Search Path Element

Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows. This issue affects Hitachi Dynamic Link Manager for Windows: from 5.9.5-00 before 9.0.4-01 ...
rapid7

CVE-2026-92863: Hitachi Hitachi Dynamic Link Manager for AIX: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)

CVE-2026-92863: Hitachi Hitachi Dynamic Link Manager for AIX: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market). View severity, references, and ...