The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112849: AivahThemes Hostme v2: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes…7.1 HighN/AN/AOct 23, 2026
CVE-2026-112848: AivahThemes Hostme v2: Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-112847: ThemeREX ZenSoul: Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-112846: ThemeREX Group Save Life: Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-98916: Linux: In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color…N/AN/AN/AOct 23, 2026
CVE-2026-98915: Linux: In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device…N/AN/AN/AOct 23, 2026
CVE-2026-98914: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth…N/AN/AN/AOct 23, 2026
CVE-2026-98913: Linux: In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in…N/AN/AN/AOct 23, 2026
CVE-2026-98912: Linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the…N/AN/AN/AOct 23, 2026
CVE-2026-98911: Linux: In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in…N/AN/AN/AOct 23, 2026
CVE-2026-98910: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on…N/AN/AN/AOct 23, 2026
CVE-2026-98909: Linux: In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port…N/AN/AN/AOct 23, 2026
CVE-2026-98908: Linux: In the Linux kernel, the following vulnerability has been resolved: net: microchip: sparx5: clean up PSFP resources on…N/AN/AN/AOct 23, 2026
CVE-2026-98907: Linux: In the Linux kernel, the following vulnerability has been resolved: btrfs: protect sb_write_pointer() with invalidate…N/AN/AN/AOct 23, 2026
CVE-2026-98906: Linux: In the Linux kernel, the following vulnerability has been resolved: net: lan966x: restore RX state on reload failure…N/AN/AN/AOct 23, 2026
CVE-2026-98905: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Properly acquire queue buffers in CRIU…N/AN/AN/AOct 23, 2026
CVE-2026-98904: Linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Use devm_pm_runtime_enable() sashiko…N/AN/AN/AOct 23, 2026
CVE-2026-98903: Linux: In the Linux kernel, the following vulnerability has been resolved: mailbox: imx: Add a channel shutdown field sashiko…N/AN/AN/AOct 23, 2026
CVE-2026-98902: Linux: In the Linux kernel, the following vulnerability has been resolved: md/raid5: let stripe batch bm_seq comparison…N/AN/AN/AOct 23, 2026
CVE-2026-98901: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix lease break and ack state handling Do…N/AN/AN/AOct 23, 2026
CVE-2026-98900: Linux: In the Linux kernel, the following vulnerability has been resolved: xen/gntalloc: validate grant count before…N/AN/AN/AOct 23, 2026
CVE-2026-98899: Linux: In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: mark the rcu locked areas…N/AN/AN/AOct 23, 2026
CVE-2026-98898: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm/si: Don't schedule thermal work when…N/AN/AN/AOct 23, 2026
CVE-2026-98897: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: don't hold ci->m_lock while waiting for a…N/AN/AN/AOct 23, 2026
CVE-2026-98896: Linux: In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Keep the domain reference while…N/AN/AN/AOct 23, 2026
326-350 of 413321