The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118242: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.5 HighN/AOct 28, 2026
CVE-2026-84725: Red Hat: when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object…8.1 HighN/AN/AOct 28, 2026
CVE-2026-79656: Grafana: A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC…6.0 MediumN/AN/AOct 28, 2026
CVE-2026-116796: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
Red Hat: CVE-2026-93536: xorg-x11-server: xorg-x11-server: Denial of Service via use-after-free in gesture event handling5.3 MediumN/AN/AOct 28, 2026
Red Hat: CVE-2026-93524: xorg-x11-server: xorg-x11-server: information disclosure via crafted keyboard mapping requestsN/A6.9 MediumN/AOct 28, 2026
Alma Linux: CVE-2026-93523: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/AN/AOct 28, 2026
CVE-2026-88967: Grafana: A user with query access to an Azure Monitor data source in Grafana can cause server-side requests to an…7.7 HighN/AN/AOct 28, 2026
CVE-2026-88858: Grafana: A user with the Viewer role in Grafana can crash the server by submitting a crafted server-side math expression…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-83525: Apache Software Foundation Apache Kafka: Incorrect operator (CWE-480) in the FetchSnapshot RPC handler in Apache Kafka from 2.8.0 before 4.2.2, and from 4.3.0…N/AN/AN/AOct 28, 2026
CVE-2026-82962: zephyrproject zephyr: ethernet_fill_header() in subsys/net/l2/ethernet/ethernet.c can prepend the Ethernet header in place, by pushing it…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-82961: zephyrproject zephyr: The GPIO syscall handlers in drivers/gpio/gpio_handlers.c did not validate the pin argument supplied by a user-mode…7.8 HighN/AN/AOct 28, 2026
CVE-2026-118619: Ultralytics: Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability8.8 HighN/AN/AOct 28, 2026
CVE-2026-118618: Ultralytics: Ultralytics parse_model Code Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118617: Ultralytics: Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118616: Ultralytics: Ultralytics parse_model Code Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118615: Ultralytics: Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118614: Ultralytics: Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118613: Ultralytics: Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118611: Alpine iLX-F511: Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118610: Alpine iLX-F511: Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 HighN/AN/AOct 28, 2026
CVE-2026-118609: Alpine iLX-F511: Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118608: Alpine iLX-F511: Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability3.5 LowN/AN/AOct 28, 2026
CVE-2026-118607: Alpine iLX-F511: Alpine iLX-F511 diagapp Command Injection Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118606: Alpine iLX-F511: Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability8.8 HighN/AN/AOct 28, 2026
276-300 of 416553