The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116507: TOTOLINK A950RG: A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B202211045.3 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116587: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…7.5 HighN/AN/AOct 26, 2026
CVE-2026-116586: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-116585: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65327: Apple macOS: A logic issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86929: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-112637: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112427: Apple macOS: An authentication issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-112688: Apple: A memory corruption issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-112626: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112651: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112655: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112659: Apple: A type confusion issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-112623: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-112438: Apple macOS: A logic issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-64759: Apple: An integer overflow was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-70382: WolfVision: Some externally supplied values stored by the device may be rendered in the web interface without sufficient output…4.1 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-70381: WolfVision: An access-control vulnerability has been identified in the web server configuration5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-70380: WolfVision: A denial-of-service vulnerability has been identified in the Miracast over Infrastructure Connection Establishment…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-65632: potatosalad jose: The jose library accepts ECDSA (ES256, ES256K, ES384, and ES512) JWS signatures of a non-canonical lengthN/A5.1 MediumN/AOct 26, 2026
CVE-2026-65631: potatosalad jose: Inefficient Algorithmic Complexity in erlang-jose allows an unauthenticated remote attacker to cause a CPU-exhaustion…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-65630: potatosalad jose: Observable Timing Discrepancy vulnerability in potatosalad jose allows recovery of a long-term X25519 private key…N/A5.9 MediumN/AOct 26, 2026
CVE-2026-65629: potatosalad jose: Use of Password Hash With Insufficient Computational Effort in the jose library allows an attacker who obtains a…N/A7.4 HighN/AOct 26, 2026
CVE-2026-65628: potatosalad jose: jose_jwk:shared_secret/2 (exposed in Elixir as JOSE.JWK.shared_secret/2) derives an ECDH shared secret from two JWKsN/A5.9 MediumN/AOct 26, 2026
CVE-2026-65627: potatosalad jose: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in potatosalad jose (erlang-jose) allows…N/A6.9 MediumN/AOct 26, 2026
401-425 of 416032