The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-122056: Red Hat: A flaw was found in OpenSCAP5.9 MediumN/AN/ANov 9, 2026
CVE-2026-124992: n/a nushell: A vulnerability was identified in nushell up to 0.116.13.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…8.1 High8.6 HighN/ANov 9, 2026
CVE-2026-113971: Apple iOS and iPadOS: This issue was addressed by restricting options offered on a locked deviceN/AN/AN/ANov 9, 2026
CVE-2026-113969: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
Apple MacOS: CVE-2026-113968: OS X update for AirPlayN/AN/AN/ANov 9, 2026
Apple MacOS: CVE-2026-113965: OS X update for CoreUtilsN/AN/AN/ANov 9, 2026
Apple MacOS: CVE-2026-113964: OS X update for CoreUtilsN/AN/AN/ANov 9, 2026
CVE-2026-113963: Apple: An authorization issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113961: Apple: An authorization issue was addressed with improved validationN/AN/AN/ANov 9, 2026
CVE-2026-113960: Apple: This issue was addressed by removing the vulnerable codeN/AN/AN/ANov 9, 2026
CVE-2026-56712: replicate cog: Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the…8.5 High6.3 MediumN/ANov 9, 2026
CVE-2026-123806: theupdateframework python-tuf: python-tuf is a Python reference implementation of The Update Framework (TUF)4.0 MediumN/AN/ANov 9, 2026
CVE-2026-87857: Temporal Technologies, Inc. Temporal Server: Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request…N/A5.3 MediumN/ANov 9, 2026
CVE-2026-125270: FFmpeg: FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125269: FFmpeg: FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125268: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the CineForm HD decoder that allows…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125267: FFmpeg: FFmpeg before 8.1.3 and 9.x before 9.0.2 contains a heap out-of-bounds write vulnerability in the APAC decoder in…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125266: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized stack memory disclosure vulnerability in old_codec23() of…3.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-125265: FFmpeg: FFmpeg through 9.0.2 contains a use-after-free vulnerability in libavcodec/nvdec.c because ff_nvdec_start_frame() fails…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125262: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/lcevcdec.c because LCEVC output…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125261: FFmpeg: FFmpeg through 9.0.2 contains an out-of-bounds read vulnerability in the SGI encoder's encode_frame() in…6.1 Medium6.9 MediumN/ANov 9, 2026
CVE-2026-125260: FFmpeg: FFmpeg through 9.0.2 contains a heap buffer overflow vulnerability in libavcodec/exrenc.c that allows attackers to…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125259: FFmpeg: FFmpeg through 9.0.2 contains an integer overflow vulnerability in ff_prores_kostya_encode_init() that miscalculates…7.8 High8.5 HighN/ANov 9, 2026
CVE-2026-125257: FFmpeg: FFmpeg through 9.0.2 contains an off-by-one heap overflow vulnerability in get_exponent_dynamic() in…7.0 High7.3 HighN/ANov 9, 2026
401-425 of 566776