The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112850: AncoraThemes Your Dress: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability…8.1 HighN/AN/AOct 23, 2026
CVE-2026-112849: AivahThemes Hostme v2: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes…7.1 HighN/AN/AOct 23, 2026
CVE-2026-112848: AivahThemes Hostme v2: Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-112847: ThemeREX ZenSoul: Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-112846: ThemeREX Group Save Life: Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-99083: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in…8.8 HighN/AN/AOct 23, 2026
CVE-2026-99082: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO…8.8 HighN/AN/AOct 23, 2026
CVE-2026-99081: Linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small…7.5 HighN/AN/AOct 23, 2026
CVE-2026-99079: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-99078: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-99077: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching…7.4 HighN/AN/AOct 23, 2026
CVE-2026-99064: Linux: In the Linux kernel, the following vulnerability has been resolved: cipso: adjust cached option offsets when removing…8.1 HighN/AN/AOct 23, 2026
CVE-2026-99059: Linux: In the Linux kernel, the following vulnerability has been resolved: wireguard: noise: reject response consumption after…7.7 HighN/AN/AOct 23, 2026
CVE-2026-99056: Linux: In the Linux kernel, the following vulnerability has been resolved: strparser: make sure __strp_recv isn't running…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99054: Linux: In the Linux kernel, the following vulnerability has been resolved: tipc: destroy topsrv workqueues before closing…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99053: Linux: In the Linux kernel, the following vulnerability has been resolved: tipc: hold a reference to nodes found by link name…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99051: Linux: In the Linux kernel, the following vulnerability has been resolved: fsverity: RCU-delay the freeing of struct…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99050: Linux: In the Linux kernel, the following vulnerability has been resolved: gpio: mpsse: fix race when arming the IRQ poll…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99046: Linux: In the Linux kernel, the following vulnerability has been resolved: gve: fix XSK buffer leak on error descriptor When…7.5 HighN/AN/AOct 23, 2026
CVE-2026-99042: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/net: populate CONNECT filter fields for…8.4 HighN/AN/AOct 23, 2026
CVE-2026-99032: Linux: In the Linux kernel, the following vulnerability has been resolved: net/smc: protect clcsock lifetime in smc_getname…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99030: Linux: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't leave stale bytes in…7.5 HighN/AN/AOct 23, 2026
CVE-2026-99018: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: entry: gate shadow call stack reload on…7.8 HighN/AN/AOct 23, 2026
CVE-2026-99017: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: errata: select RISCV_ALTERNATIVE_EARLY for…7.0 HighN/AN/AOct 23, 2026
CVE-2026-99016: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: futex: untag the user pointer before the…7.8 HighN/AN/AOct 23, 2026
351-375 of 413119