The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119282: nrwl, @nx: Nx is a monorepo solution for TypeScript and polyglot codebasesN/A7.3 HighN/AOct 29, 2026
CVE-2026-92092: Red Hat Red Hat OpenShift Container Platform 4: A flaw was found in openshift-ansible7.4 HighN/AN/AOct 29, 2026
CVE-2026-67205: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-67203: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-51832: n/a: An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a…N/AN/AN/AOct 29, 2026
CVE-2026-51831: n/a: An issue in IDrive IDrive Backup for Windows Version 7.0.1.1 and below affected, remediated in Version 7.0.1.2 allows a…N/AN/AN/AOct 29, 2026
CVE-2026-119197: pyasn1: pyasn1 is a generic ASN.1 library for Python7.5 HighN/AN/AOct 29, 2026
CVE-2026-119196: pyasn1: pyasn1 is a generic ASN.1 library for Python7.5 HighN/AN/AOct 29, 2026
CVE-2026-119195: pyasn1: pyasn1 is a generic ASN.1 library for Python7.5 HighN/AN/AOct 29, 2026
CVE-2026-119194: pyasn1: pyasn1 is a generic ASN.1 library for Python7.5 HighN/AN/AOct 29, 2026
CVE-2026-119193: sebastianbergmann phpunit: PHPUnit is a testing framework for PHPN/A5.4 MediumN/AOct 29, 2026
CVE-2026-119191: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119190: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.4 HighN/AN/AOct 29, 2026
CVE-2026-119189: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119188: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119187: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119186: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript5.9 MediumN/AN/AOct 29, 2026
CVE-2026-9536: vtk: A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-9535: vtk: A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1)8.2 HighN/AN/AOct 29, 2026
CVE-2026-8824: vtk: A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-8822: vtk: A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1)7.5 HighN/AN/AOct 29, 2026
CVE-2026-6877: ServiceNow ServiceNow AI Platform: ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM –…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-58120: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-58119: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-58118: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
26-50 of 538495