The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112915: tox-dev filelock: filelock is a platform-independent file lock for Python5.5 MediumN/AN/AOct 20, 2026
CVE-2026-112914: tox-dev filelock: filelock is a platform-independent file lock for Python5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112912: tox-dev filelock: filelock is a platform-independent file lock for Python2.5 LowN/AN/AOct 20, 2026
CVE-2026-112911: tox-dev filelock: filelock is a platform-independent file lock for Python6.3 MediumN/AN/AOct 20, 2026
CVE-2026-112909: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112906: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112834: Castos Seriously Simple Podcasting: Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112833: Castos Seriously Simple Podcasting: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-111762: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) ProtocolN/A5.7 MediumN/AOct 20, 2026
CVE-2026-111761: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol5.8 MediumN/AN/AOct 20, 2026
CVE-2026-96582: Eclipse Foundation Eclipse ThreadX - USBX: A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow4.9 MediumN/AN/AOct 20, 2026
CVE-2026-96406: Eclipse Foundation Eclipse ThreadX - USBX: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of…4.9 MediumN/AN/AOct 20, 2026
CVE-2026-93446: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittentlyN/AN/AN/AOct 20, 2026
CVE-2026-91041: Eclipse Foundation Eclipse ThreadX - FileX: Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log…7.8 HighN/AN/AOct 20, 2026
CVE-2026-88041: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a…N/AN/AN/AOct 20, 2026
CVE-2026-80353: Apache Software Foundation Apache Tomcat: Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for…N/AN/AN/AOct 20, 2026
CVE-2026-74049: Apache Software Foundation Apache Tomcat: Execution After Redirect (EAR) vulnerability in Apache TomcatN/AN/AN/AOct 20, 2026
CVE-2026-74048: Apache Software Foundation Apache Tomcat: Not Failing Securely ('Failing Open') vulnerability in Apache TomcatN/AN/AN/AOct 20, 2026
CVE-2026-113396: DrayTek Vigor2960: A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 LowN/AOct 20, 2026
CVE-2026-113395: DrayTek Vigor2960: A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 LowN/AOct 20, 2026
CVE-2026-113394: DrayTek Vigor2960: A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 LowN/AOct 20, 2026
CVE-2026-113393: DrayTek Vigor2960: A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 82186.3 Medium2.1 LowN/AOct 20, 2026
CVE-2026-103119: Apache Software Foundation Apache Tomcat: Buffer under-read vulnerability in Apache Tomcat meant that a large non-blocking write could result in the response…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-101356: Apache Software Foundation Apache Tomcat: Incorrect object recycling and re-use vulnerability in Apache Tomcat affecting HTTP/2 processing of asynchronous…9.1 CriticalN/AN/AOct 20, 2026
CVE-2026-101296: Apache Software Foundation Apache Tomcat: A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a…N/A9.1 CriticalN/AOct 20, 2026
251-275 of 407346