The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118766: randombit botan: Botan is a C++ cryptography library6.1 MediumN/AN/AOct 29, 2026
CVE-2026-116566: Python Software Foundation CPython: socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-107347: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log…8.4 HighN/AN/AOct 29, 2026
CVE-2026-102260: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-41216: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.67.5 HighN/AN/AOct 29, 2026
CVE-2026-42057: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.67.5 HighN/AN/AOct 29, 2026
CVE-2026-8822: vtk: A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1)7.5 HighN/AN/AOct 29, 2026
CVE-2026-8824: vtk: A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-9535: vtk: A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1)8.2 HighN/AN/AOct 29, 2026
CVE-2026-9536: vtk: A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-118772: hapijs, @hapi joi: joi is a schema description language and data validator for JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119168: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration…8.8 HighN/AN/AOct 29, 2026
CVE-2026-62374: openwallet-foundation: SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specificationN/A7.1 HighN/AOct 29, 2026
CVE-2026-11587: Centreon: SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database7.2 HighN/AN/AOct 29, 2026
CVE-2026-119115: AWS aws-privateca-issuer: Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes…8.5 High8.4 HighN/AOct 29, 2026
CVE-2026-118765: randombit botan: Botan is a C++ cryptography libraryN/A7.3 HighN/AOct 29, 2026
CVE-2026-118764: isaacs minimatch: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objectsN/A8.7 HighN/AOct 29, 2026
CVE-2026-118763: sigstore sigstore-js: sigstore-js provides JavaScript libraries for interacting with Sigstore services7.4 HighN/AN/AOct 29, 2026
CVE-2026-118762: monkeytypegame monkeytype: Monkeytype is a minimalistic and customizable typing test9.3 CriticalN/AN/AOct 29, 2026
CVE-2026-118761: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows7.5 HighN/AN/AOct 29, 2026
CVE-2026-118760: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows6.5 MediumN/AN/AOct 29, 2026
CVE-2026-118759: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows7.5 HighN/AN/AOct 29, 2026
CVE-2026-118758: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows7.5 HighN/AN/AOct 29, 2026
CVE-2026-115805: Rapid7 Insight Agent: Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local…7.8 HighN/AN/AOct 29, 2026
CVE-2026-107060: n/a: Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to…N/AN/AN/AOct 29, 2026
26-50 of 538495