The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116726: mmitch gbsplay: Gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in gbr_open() in gbs.c that fails to verify…3.3 Low4.8 MediumN/AOct 26, 2026
CVE-2026-116725: mmitch gbsplay: gbsplay through 0.0.103 contains an out-of-bounds read vulnerability in mapper_map() in mapper.c that fails to reject…5.5 Medium6.8 MediumN/AOct 26, 2026
CVE-2026-116724: fltk: FLTK through 1.4.5 contains an integer overflow vulnerability in Fl_BMP_Image::load_bmp_() that causes undersized pixel…7.8 High8.5 HighN/AOct 26, 2026
CVE-2026-116723: fltk: FLTK through 1.4.5 contains a stack-based buffer overflow vulnerability in Fl_BMP_Image::load_bmp_() that allows…7.8 High8.5 HighN/AOct 26, 2026
CVE-2026-116590: xerial snappy-java: snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google5.9 MediumN/AN/AOct 26, 2026
CVE-2026-116514: itsourcecode Airline Reservation System: A weakness has been identified in itsourcecode Airline Reservation System 1.04.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116508: TOTOLINK A950RG: A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-116589: DataDog dd-trace-py: Datadog dd-trace-py is the Datadog Python APM clientN/A8.2 HighN/AOct 26, 2026
CVE-2026-116588: DataDog dd-trace-py: Datadog dd-trace-py is the Datadog Python APM clientN/A8.7 HighN/AOct 26, 2026
CVE-2026-86992: Apple: The issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-86991: Apple: A buffer overflow was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-86990: Apple: An access issue was addressed with improved access restrictionsN/AN/AN/AOct 26, 2026
CVE-2026-86989: Apple iOS and iPadOS: An authorization issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-86988: Apple: The issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86987: Apple iOS and iPadOS: An authorization issue was addressed with improved entitlement checksN/AN/AN/AOct 26, 2026
CVE-2026-86986: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-86985: Apple: This issue was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-86984: Apple macOS: A file access issue existed with certain home folder filesN/AN/AN/AOct 26, 2026
CVE-2026-86978: Apple: This issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86974: Apple: A type confusion issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86973: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-86972: Apple: A buffer overflow was addressed with improved size validationN/AN/AN/AOct 26, 2026
CVE-2026-86971: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-86970: Apple: An out-of-bounds read was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-86969: Apple: An out-of-bounds write was addressed with improved input validationN/AN/AN/AOct 26, 2026
26-50 of 416032