The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-62863: gojue moling: MoLing is a computer-use and browser-use based MCP server9.6 CriticalN/AN/AOct 30, 2026
CVE-2026-62860: Zoeille picsou-finance: Picsou is a self-hosted personal finance dashboard5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62853: mqttsnet thinglinks: ThingLinks is an enterprise IoT platform9.9 CriticalN/AN/AOct 30, 2026
CVE-2026-62849: mqttsnet thinglinks: ThingLinks is an enterprise IoT platform9.1 CriticalN/AN/AOct 30, 2026
CVE-2026-62848: Metalama: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#7.3 HighN/AN/AOct 30, 2026
CVE-2026-62847: Metalama: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#8.2 HighN/AN/AOct 30, 2026
CVE-2026-62300: filecoin-project filecoin-pin: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service6.5 MediumN/AN/AOct 30, 2026
CVE-2026-62297: Agamnentzar ag-psd: ag-psd is a JavaScript library for reading and writing Photoshop Document files7.5 HighN/AN/AOct 30, 2026
CVE-2026-62254: libredwg: LibreDWG is a free C library to read and write DWG files5.5 MediumN/AN/AOct 30, 2026
CVE-2026-62250: libredwg: LibreDWG is a free C library to read and write DWG files5.5 MediumN/AN/AOct 30, 2026
CVE-2026-59993: h2o picotls: Picotls is a TLS protocol library that allows users select different crypto backends based on their use case6.5 MediumN/AN/AOct 30, 2026
CVE-2026-58412: filecoin-project filecoin-pin: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service8.2 HighN/AN/AOct 30, 2026
CVE-2026-54610: libredwg: LibreDWG is a free C library to read and write DWG files3.3 LowN/AN/AOct 30, 2026
CVE-2026-40573: MinecAnton209 NovumOS: NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly8.6 HighN/AN/AOct 30, 2026
CVE-2026-119343: Stirling-Tools Stirling-PDF: Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files6.8 MediumN/AN/AOct 30, 2026
CVE-2026-119342: Stirling-Tools Stirling-PDF: Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files5.3 MediumN/AN/AOct 30, 2026
CVE-2026-119341: tesseract-ocr tesseract: Tesseract is an open source OCR engine0.0 NoneN/AN/AOct 30, 2026
CVE-2026-119340: tesseract-ocr tesseract: Tesseract is an open source OCR engine5.5 MediumN/AN/AOct 30, 2026
CVE-2026-119339: tesseract-ocr tesseract: Tesseract is an open source OCR engine5.5 MediumN/AN/AOct 30, 2026
CVE-2026-119338: tesseract-ocr tesseract: Tesseract is an open source OCR engineN/A6.9 MediumN/AOct 30, 2026
CVE-2026-117666: deadtrickster ssl_verify_fun: Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary…N/A9.1 CriticalN/AOct 30, 2026
CVE-2026-117645: phoenixframework phoenix_html: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework…N/A5.3 MediumN/AOct 30, 2026
CVE-2026-16760: trailofbits fickling: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the…8.8 HighN/AN/AOct 30, 2026
CVE-2026-95673: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBERN/AN/AN/AOct 30, 2026
CVE-2026-78403: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows…9.8 Critical9.3 CriticalN/AOct 30, 2026
26-50 of 418318