The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-108313: Tanium Tanium Server: Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.6.6 MediumN/AN/AOct 27, 2026
CVE-2026-116649: Tanium Enforce: Tanium addressed an improper output sanitization vulnerability in Enforce.7.1 HighN/AN/AOct 27, 2026
CVE-2026-116647: Tanium Comply: Tanium addressed an improper output sanitization vulnerability in Comply.7.1 HighN/AN/AOct 27, 2026
CVE-2026-116660: Tanium Enforce: Tanium addressed an improper access controls vulnerability in Enforce.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108326: Tanium: Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108330: Tanium: Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.3.6 LowN/AN/AOct 27, 2026
CVE-2026-116657: Tanium Enforce: Tanium addressed a denial of service vulnerability in Enforce.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-108333: Tanium: Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.2.5 LowN/AN/AOct 27, 2026
CVE-2026-108307: Tanium: Tanium addressed a heap-based buffer overflow vulnerability in Index.7.8 HighN/AN/AOct 27, 2026
CVE-2026-116679: m1k1o neko: Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC5.4 MediumN/AN/AOct 27, 2026
CVE-2026-108310: Tanium Tanium Server: Tanium addressed a denial of service vulnerability in Tanium Server.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-116662: Tanium Enforce: Tanium addressed a compression bomb vulnerability in Enforce.7.5 HighN/AN/AOct 27, 2026
CVE-2026-108305: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108331: Tanium: Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.3.3 LowN/AN/AOct 27, 2026
CVE-2026-87085: Tanium Provision: Tanium addressed a SQL injection vulnerability in Provision.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108308: Tanium Patch: Tanium addressed a SQL injection vulnerability in Patch.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-117516: oretnom23 php-travel-agency-system: A weakness has been identified in oretnom23 php-travel-agency-system7.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-108328: Tanium Threat Response: Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.4.2 MediumN/AN/AOct 27, 2026
CVE-2026-116678: dani-garcia vaultwarden: Vaultwarden is a Bitwarden-compatible server written in Rust5.8 MediumN/AN/AOct 27, 2026
CVE-2026-118131: GnuPG: GnuPG (version 2.5.21) for Windows contains a vulnerability where default Discretionary Access Control List (DACL)…N/AN/AN/AOct 27, 2026
CVE-2026-116677: openwisp openwisp-controller: OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI…N/A5.3 MediumN/AOct 27, 2026
CVE-2026-16491: Grafana: Grafana’s RBAC service ignored the requested folder when checking whether a user was a folder administrator for deleted…6.5 MediumN/AN/AOct 27, 2026
CVE-2026-87897: Nextcloud whiteboard: A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82986: Nextcloud Tables: The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82984: Nextcloud Server: When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team…4.3 MediumN/AN/AOct 27, 2026
26-50 of 522616