The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57197: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.7 HighN/AOct 27, 2026
CVE-2026-109090: x.org libXi: A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi…7.5 HighN/AN/AOct 27, 2026
CVE-2026-116672: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers8.8 HighN/AN/AOct 27, 2026
CVE-2026-117512: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-109088: X.org libXtst: A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the…6.5 MediumN/AN/AOct 27, 2026
CVE-2026-48380: Adobe Adobe Substance 3D Painter: Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 27, 2026
CVE-2026-48379: Adobe Adobe Substance 3D Painter: Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 27, 2026
CVE-2026-104349: Adobe Creative Cloud Desktop Application: Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary…7.3 HighN/AN/AOct 27, 2026
CVE-2026-93866: WatchGuard Fireware OS: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93865: WatchGuard Fireware OS: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: WatchGuard Fireware OS: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution…N/A7.1 HighN/AOct 27, 2026
CVE-2026-93862: WatchGuard Fireware OS: An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A7.2 HighN/AOct 27, 2026
CVE-2026-93857: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93434: WatchGuard Fireware OS: An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote,…N/A8.7 HighN/AOct 27, 2026
CVE-2026-92377: TeamViewer: Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92376: TeamViewer Remote Management - Monitoring: Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92375: TeamViewer: An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92374: TeamViewer: A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92372: TeamViewer Full Client: An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-90465: WatchGuard Fireware OS: A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A9.4 CriticalN/AOct 27, 2026
CVE-2026-90464: WatchGuard Fireware OS: An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,…N/A7.2 HighN/AOct 27, 2026
CVE-2026-90442: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with…N/A8.6 HighN/AOct 27, 2026
CVE-2026-82332: WatchGuard Fireware OS: An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process…N/A5.7 MediumN/AOct 27, 2026
CVE-2026-117511: desmondmorris node-tesseract: A vulnerability has been found in desmondmorris node-tesseract up to 0.2.77.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-117510: Dexmal Dexbotic: A flaw has been found in Dexmal Dexbotic up to 0.2.06.3 Medium2.1 LowN/AOct 27, 2026
26-50 of 522616