The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-99106: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: free the userptr ranges when a CS fails…N/AN/AN/AOct 28, 2026
CVE-2026-99105: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix stall when a task enqueued with…N/AN/AN/AOct 28, 2026
CVE-2026-99104: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix the bypass dispatch claim for…N/AN/AN/AOct 28, 2026
CVE-2026-99103: Linux: In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix unbound pool lifetime for pending…N/AN/AN/AOct 28, 2026
CVE-2026-99102: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in ntfs_setattr_size()…N/AN/AN/AOct 28, 2026
CVE-2026-99101: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: move attribute payload before shrinking its…N/AN/AN/AOct 28, 2026
CVE-2026-87880: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to missing SSL certificate verification affecting one component6.8 MediumN/AN/AOct 28, 2026
CVE-2026-87879: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to improper token validation5.9 MediumN/AN/AOct 28, 2026
CVE-2026-87878: Acronis Acronis Cyber Protect 17: Linux binaries have executable stack attribute enabled6.3 MediumN/AN/AOct 28, 2026
CVE-2026-87103: Acronis Acronis Cyber Protect 17: Sensitive information disclosure and manipulation due to improper token validation7.4 HighN/AN/AOct 28, 2026
CVE-2026-87102: Acronis Acronis Cyber Protect 17: Sensitive information disclosure and manipulation due to improper token validation7.4 HighN/AN/AOct 28, 2026
CVE-2026-87101: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to improper token validation6.2 MediumN/AN/AOct 28, 2026
CVE-2026-87100: Acronis Acronis Cyber Protect 17: Protection mechanism failure due to missing binary hardening in Linux executables3.6 LowN/AN/AOct 28, 2026
CVE-2026-87099: Acronis Acronis Cyber Protect 17: Cross-site scripting (XSS) vulnerability due to improper input validation5.7 MediumN/AN/AOct 28, 2026
CVE-2026-87098: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to improper authorization3.1 LowN/AN/AOct 28, 2026
CVE-2026-87097: Acronis Acronis Cyber Protect 17: Sensitive information disclosure due to insufficiently protected credentials5.3 MediumN/AN/AOct 28, 2026
CVE-2026-86378: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…8.8 HighN/AN/AOct 28, 2026
CVE-2026-86377: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…7.6 HighN/AN/AOct 28, 2026
CVE-2026-6064: Gen Digital: Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet…7.3 HighN/AN/AOct 28, 2026
CVE-2026-117858: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117857: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117856: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117855: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117854: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
CVE-2026-117853: Rejected reason: Reserved in error; never associated with a vulnerability.N/AN/AN/AOct 28, 2026
426-450 of 413066