The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112414: Apple: A stack overflow was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-112697: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112678: Apple: A permissions issue was addressed with additional restrictionsN/AN/AN/AOct 26, 2026
CVE-2026-84599: Apple: The issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-112506: Apple macOS: A permissions issue was addressed with improved validationN/AN/AN/AOct 26, 2026
CVE-2026-112443: Apple macOS: The issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-113897: Apple: This issue was addressed by removing the vulnerable codeN/AN/AN/AOct 26, 2026
CVE-2026-116504: TOTOLINK A950RG: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B202211049.9 Critical9.4 CriticalN/AOct 26, 2026
CVE-2026-116579: crossbario autobahn-python: Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio5.9 MediumN/AN/AOct 26, 2026
CVE-2026-116578: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking libraryN/A2.1 LowN/AOct 26, 2026
CVE-2026-116577: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking library5.3 MediumN/AN/AOct 26, 2026
CVE-2026-70382: WolfVision: Some externally supplied values stored by the device may be rendered in the web interface without sufficient output…4.1 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-70381: WolfVision: An access-control vulnerability has been identified in the web server configuration5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-70380: WolfVision: A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116576: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js7.8 HighN/AN/AOct 26, 2026
CVE-2026-65632: potatosalad jose: The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical lengthN/A5.1 MediumN/AOct 26, 2026
CVE-2026-65631: potatosalad jose: Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65630: potatosalad jose: Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-65629: potatosalad jose: Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a…N/A7.4 HighN/AOct 26, 2026
CVE-2026-65628: potatosalad jose: jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKsN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65627: potatosalad jose: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65626: potatosalad jose: The pure-Erlang RSAES-PKCS1-v1_5 decryption in the jose_jwa_pkcs1 module is a Bleichenbacher padding oracleN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65625: potatosalad jose: The pure-Erlang AES-GCM fallback in jose_jwa_aes derives the number of verified authentication tag bits from the…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-57196: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 26, 2026
CVE-2026-57193: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.9 MediumN/AOct 26, 2026
326-350 of 416032