The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117873: Mozilla: Incorrect boundary conditions in the Audio/Video: Playback componentN/AN/AN/AOct 27, 2026
CVE-2026-117872: Mozilla: Use-after-free in the JavaScript: Standard Library componentN/AN/AN/AOct 27, 2026
CVE-2026-117871: Mozilla: Invalid pointer in the Graphics componentN/AN/AN/AOct 27, 2026
CVE-2026-117870: Mozilla: Use-after-free in the JavaScript Engine componentN/AN/AN/AOct 27, 2026
CVE-2026-117869: Mozilla: Use-after-free in the DOM: Core & HTML componentN/AN/AN/AOct 27, 2026
CVE-2026-117868: Mozilla: Sandbox escape in the DOM: Networking componentN/AN/AN/AOct 27, 2026
CVE-2026-117867: Mozilla: Use-after-free in the Layout componentN/AN/AN/AOct 27, 2026
CVE-2026-117866: Mozilla: Privilege escalation due to use-after-free in the Graphics: Canvas2D componentN/AN/AN/AOct 27, 2026
CVE-2026-117865: Mozilla: Use-after-free in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-117864: Mozilla: Sandbox escape in the Form Manager componentN/AN/AN/AOct 27, 2026
CVE-2026-117863: Mozilla: Information disclosure due to uninitialized memory in the Audio/Video componentN/AN/AN/AOct 27, 2026
CVE-2026-117862: Mozilla: Privilege escalation due to incorrect boundary conditions in the Networking componentN/AN/AN/AOct 27, 2026
CVE-2026-117861: Mozilla: Sandbox escape in the DOM: Navigation componentN/AN/AN/AOct 27, 2026
CVE-2026-117860: Mozilla: Same-origin policy bypass in the DOM: Navigation componentN/AN/AN/AOct 27, 2026
CVE-2026-92546: Keepnet Labs Cybersecurity Inc. Agentic AI / Agentic Ally: Authentication bypass by spoofing vulnerability in Keepnet Labs Cybersecurity Inc7.5 HighN/AN/AOct 27, 2026
CVE-2026-65151: NVIDIA NeMo Agent Toolkit: NVIDIA NeMo Agent Toolkit contains vulnerability where an attacker could cause a SQL injection issue8.4 HighN/AN/AOct 27, 2026
CVE-2026-65145: NVIDIA NeMo Agent Toolkit: NVIDIA NeMo Agent Toolkit contains a vulnerability where a attacker could cause a missing authentication issue10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-65120: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery7.1 HighN/AN/AOct 27, 2026
CVE-2026-65119: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM for any platform contains a vulnerability in KvCacheAwareRouter tokenizer loading, where an…8.4 HighN/AN/AOct 27, 2026
CVE-2026-47486: NVIDIA PhysX: NVIDIA PhysX for all platforms contains a vulnerability where an attacker could cause an out-of-bounds write7.8 HighN/AN/AOct 27, 2026
CVE-2026-24269: NVIDIA TensorRT-LLM: NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a server-side request forgery7.1 HighN/AN/AOct 27, 2026
CVE-2026-15586: İdvlabs Software and Consulting Services Inc. Ontime: Improper restriction of excessive authentication attempts vulnerability in İdvlabs Software and Consulting Services Inc5.3 MediumN/AN/AOct 27, 2026
CVE-2026-116627: Devolutions PowerShell Universal: Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in…N/AN/AN/AOct 27, 2026
CVE-2026-114409: Docker Docker Desktop: Docker Desktop before version 4.97.0 could write third-party API keys and OAuth access tokens in cleartext to local…N/A5.7 MediumN/AOct 27, 2026
CVE-2026-107590: Qt: An out-of-bounds write vulnerability in the Qt QTextCodec iconv-based encoding of the Qt 5 Compatibility APIs module…N/A1.9 LowN/AOct 27, 2026
351-375 of 522616