The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-98440: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: nv: Delay freeing of shadow S2…N/AN/AN/AOct 18, 2026
CVE-2026-111987: AUTOMATIC1111 stable-diffusion-webui: A vulnerability was identified in AUTOMATIC1111 stable-diffusion-webui up to 1.10.14.3 Medium2.1 LowN/AOct 18, 2026
CVE-2026-112063: strophe libstrophe: libstrophe through 0.14.0 contains a stack-based buffer overflow vulnerability in SCRAM_Hi that allows malicious XMPP…5.9 Medium6.0 MediumN/AOct 18, 2026
CVE-2026-112062: lwIP: lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent…5.9 Medium6.0 MediumN/AOct 18, 2026
CVE-2026-112061: RTMPDump librtmp: librtmp (RTMPDump) through 2.6 contains a heap out-of-bounds read vulnerability in AMFProp_Decode that reads an AMF0…4.3 Medium5.3 MediumN/AOct 18, 2026
CVE-2026-112060: RTMPDump librtmp: librtmp in RTMPDump through 2.6 contains an out-of-bounds read and heap out-of-bounds write vulnerability because…6.4 Medium6.1 MediumN/AOct 18, 2026
CVE-2026-112059: libLAS: libLAS through 1.8.1 contains a heap out-of-bounds write vulnerability in the point record reader caused by truncating…6.1 Medium6.9 MediumN/AOct 18, 2026
CVE-2026-112058: VideoLAN libdvdnav: VideoLAN libdvdnav through 7.0.0 contains an out-of-bounds read vulnerability in set_PTT that allows attackers to crash…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112057: VideoLAN libdvdnav: libdvdnav before 7.0.0 contains a heap out-of-bounds read vulnerability in dvdnav_describe_title_chapters that allows…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112056: wvWare wv: wvWare wv through 1.2.9 contains a heap-based out-of-bounds read vulnerability in wvGetSTSH in stylesheet.c that allows…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112055: wvWare wv: wvWare wv through 1.2.9 contains a stack-based out-of-bounds read vulnerability in wvGetPAPX_FKP and wvGetCHPX_FKP…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112054: schroedinger: Schroedinger libschroedinger through 1.0.11 contains a divide by zero vulnerability that allows attackers to crash…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112053: schroedinger: Schroedinger libschroedinger through 1.0.11 contains an out-of-bounds read vulnerability that allows attackers to read…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-112052: SpatiaLite libspatialite: libspatialite through 5.1.0 contains an integer overflow vulnerability in the WKB point and vertex count size guard of…6.1 Medium6.9 MediumN/AOct 18, 2026
CVE-2026-112051: xorbitsai inference: Xinference through 4.0.1 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to…6.5 Medium8.3 HighN/AOct 18, 2026
CVE-2026-112050: gitify-app gitify: Gitify before 7.10.0 contains a login cross-site request forgery vulnerability that allows remote attackers to bind a…3.1 Low2.3 LowN/AOct 18, 2026
CVE-2026-112049: Vita3K: Vita3K before build 4187 contains a path traversal (zip slip) vulnerability in install_archive_content() that allows…5.5 Medium6.7 MediumN/AOct 18, 2026
CVE-2026-112048: SpatiaLite libspatialite: libspatialite through 5.1.0 fails to validate the polygon ring count in ParseWkbPolygon, allowing attackers to trigger…6.1 Medium6.9 MediumN/AOct 18, 2026
CVE-2026-112047: oneuptime: OneUptime 14.0.2 before 14.0.69 contains an incorrect authorization vulnerability that allows authenticated project…5.4 Medium5.3 MediumN/AOct 18, 2026
CVE-2026-112046: OW2 ASM: OW2 ASM 9.11 before 9.11.1 contains an infinite loop vulnerability in Label.resolve() caused by 16-bit…5.5 Medium6.8 MediumN/AOct 18, 2026
CVE-2026-111986: AUTOMATIC1111 stable-diffusion-webui: A vulnerability was determined in AUTOMATIC1111 stable-diffusion-webui up to 1.10.16.3 Medium2.1 LowN/AOct 18, 2026
CVE-2026-78497: Eval InjectionN/AN/AN/AOct 18, 2026
CVE-2026-112021: grunfink snac2: snac2 before 2.93 contains a heap-based buffer overflow vulnerability in _xs_json_load_lexer() that allows…7.5 High8.7 HighN/AOct 18, 2026
CVE-2026-112020: lvandeve lodepng: LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced() in…6.1 Medium6.9 MediumN/AOct 18, 2026
CVE-2026-112019: jkuhlmann cgltf: cgltf through 1.15 contains a heap out-of-bounds read vulnerability in cgltf_accessor_unpack_floats() that advances the…6.1 Medium6.9 MediumN/AOct 18, 2026
226-250 of 406803
‹›