The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-12489: Zyxel EX3501-T0 firmware: An incorrect authorization vulnerability in the Data Access Layer (DAL) of Zyxel EX3501-T0 firmware versions through…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-75753: ASUS Router: Missing Authentication for a Critical Function in certain ASUS routers allows an unauthorized nearby user to send…N/A5.3 MediumN/AOct 20, 2026
CVE-2026-17518: ASUS Router: Buffer Copy without Checking Size of Input in certain ASUS router models allows an adjacent authenticated user to…N/A8.2 HighN/AOct 20, 2026
CVE-2026-105299: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.9.0, the HTTP/1 upstream path in pingora-proxy passed the downstream request through…8.7 HighN/AN/AOct 20, 2026
CVE-2026-102438: ASUS: An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code…N/A8.5 HighN/AOct 20, 2026
CVE-2026-86981: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checking5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86979: Apple macOS: A privacy issue was addressed with improved checks5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86977: Apple iOS and iPadOS: An authorization issue was addressed with improved network restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-86976: Apple: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86975: Apple: An out-of-bounds read was addressed with improved bounds checking4.3 MediumN/AN/AOct 20, 2026
CVE-2026-86963: Apple iOS and iPadOS: A denial-of-service issue was addressed with improved input validation5.9 MediumN/AN/AOct 20, 2026
CVE-2026-86962: Apple: A double free issue was addressed with improved memory management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86961: Apple: A race condition was addressed with additional validation7.8 HighN/AN/AOct 20, 2026
CVE-2026-86959: Apple: An input validation issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86957: Apple: An out-of-bounds read was addressed with improved bounds checking6.5 MediumN/AN/AOct 20, 2026
CVE-2026-86955: Apple iOS and iPadOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86953: Apple: An out-of-bounds write issue was addressed with improved bounds checking4.6 MediumN/AN/AOct 20, 2026
CVE-2026-86949: Apple Xcode: This issue was addressed by enforcing library validation on the affected binaries8.8 HighN/AN/AOct 20, 2026
CVE-2026-86948: Apple Xcode: This issue was addressed by enforcing library validation on the affected binariesN/AN/AN/AOct 20, 2026
CVE-2026-86944: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-86940: Apple macOS: This issue was addressed by removing the vulnerable code5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86935: Apple macOS: This issue was addressed by removing additional entitlementsN/AN/AN/AOct 20, 2026
CVE-2026-86933: Apple macOS: A permissions issue was addressed with additional sandbox restrictions3.3 LowN/AN/AOct 20, 2026
CVE-2026-86932: Apple macOS: An authorization issue was addressed with improved state management5.5 MediumN/AN/AOct 20, 2026
CVE-2026-86928: Apple macOS: A path handling issue was addressed with improved validation5.5 MediumN/AN/AOct 20, 2026
301-325 of 407346
‹›