The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117875: Mozilla Firefox: Use-after-free in the Layout: Scrolling and Overflow componentN/AN/AN/AOct 27, 2026
CVE-2026-117874: Mozilla Firefox: Use-after-free in the Internationalization componentN/AN/AN/AOct 27, 2026
CVE-2026-117873: Mozilla Firefox: Incorrect boundary conditions in the Audio/Video: Playback componentN/AN/AN/AOct 27, 2026
CVE-2026-117872: Mozilla Firefox: Use-after-free in the JavaScript: Standard Library componentN/AN/AN/AOct 27, 2026
CVE-2026-117871: Mozilla Firefox: Invalid pointer in the Graphics componentN/AN/AN/AOct 27, 2026
CVE-2026-117870: Mozilla Firefox: Use-after-free in the JavaScript Engine componentN/AN/AN/AOct 27, 2026
CVE-2026-117869: Mozilla Firefox: Use-after-free in the DOM: Core & HTML componentN/AN/AN/AOct 27, 2026
CVE-2026-117868: Mozilla Firefox: Sandbox escape in the DOM: Networking componentN/AN/AN/AOct 27, 2026
CVE-2026-117867: Mozilla Firefox: Use-after-free in the Layout componentN/AN/AN/AOct 27, 2026
CVE-2026-117866: Mozilla Firefox: Privilege escalation due to use-after-free in the Graphics: Canvas2D componentN/AN/AN/AOct 27, 2026
CVE-2026-117865: Mozilla Firefox: Use-after-free in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-117864: Mozilla Firefox: Sandbox escape in the Form Manager componentN/AN/AN/AOct 27, 2026
CVE-2026-117863: Mozilla Firefox: Information disclosure due to uninitialized memory in the Audio/Video componentN/AN/AN/AOct 27, 2026
CVE-2026-117862: Mozilla Firefox: Privilege escalation due to incorrect boundary conditions in the Networking componentN/AN/AN/AOct 27, 2026
CVE-2026-117861: Mozilla Firefox: Sandbox escape in the DOM: Navigation componentN/AN/AN/AOct 27, 2026
CVE-2026-117860: Mozilla Firefox: Same-origin policy bypass in the DOM: Navigation componentN/AN/AN/AOct 27, 2026
CVE-2026-117603: spesmilo electrum: Electrum before 4.7.2 contains a spending limit bypass vulnerability in the Nostr Wallet Connect plugin that allows…4.3 Medium9.3 CriticalN/AOct 27, 2026
CVE-2026-117602: spesmilo electrum: Electrum 4.6.0 before 4.7.2 contains an authorization bypass in the external plugin loader, which executes a plugin's…8.4 High8.6 HighN/AOct 27, 2026
CVE-2026-117601: spesmilo electrum: Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing…7.5 High9.3 CriticalN/AOct 27, 2026
CVE-2026-117573: masc-ucsc hagent: hagent through commit 761eec6 contains an OS command injection vulnerability that allows MCP clients to execute shell…7.8 High8.5 HighN/AOct 27, 2026
CVE-2026-117570: Vorota-ai nmap-mcp: Vorota-ai nmap-mcp through commit 3636afa contains an improper allowlist validation vulnerability in the…5.2 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-117569: alishahid74 kali-gpt: Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in…7.8 High8.5 HighN/AOct 27, 2026
CVE-2026-117568: bitscorp-mcp mcp-ffmpeg: mcp-ffmpeg through 1.0.5 contains an OS command injection vulnerability that allows attackers to run shell commands by…7.0 High7.3 HighN/AOct 27, 2026
CVE-2026-117567: horw esp-mcp: esp-mcp through commit 28afddf contains an OS command injection vulnerability that allows attackers to run arbitrary…7.8 High8.5 HighN/AOct 27, 2026
CVE-2026-117566: icret EasyImages2.0: EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and…5.3 Medium6.9 MediumN/AOct 27, 2026
226-250 of 522616