The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-115805: Rapid7 Insight Agent: Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local…7.8 HighN/AN/AOct 29, 2026
CVE-2026-107060: n/a: Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to…N/AN/AN/AOct 29, 2026
CVE-2026-107059: n/a: An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and…N/AN/AN/AOct 29, 2026
CVE-2026-107058: n/a: An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another…N/AN/AN/AOct 29, 2026
CVE-2026-107057: n/a: An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.N/AN/AN/AOct 29, 2026
CVE-2026-107056: n/a: Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107055: n/a: Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107053: n/a: Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write…N/AN/AN/AOct 29, 2026
CVE-2026-107052: n/a: Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized…N/AN/AN/AOct 29, 2026
CVE-2026-107051: n/a: Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107050: n/a: An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in…N/AN/AN/AOct 29, 2026
CVE-2026-107049: n/a: An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via…N/AN/AN/AOct 29, 2026
CVE-2026-107048: n/a: An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107047: n/a: Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the…N/AN/AN/AOct 29, 2026
CVE-2026-107046: n/a: A Server-Side Request Forgery (SSRF) in the url/title/author/coverUrl component of FocusPodcast versionCode 70allows…N/AN/AN/AOct 29, 2026
CVE-2026-107045: n/a: Insecure permissions in the CitrineContentProvider component of Citrine v3.1.0 (versionCode 62) allows unauthorized…N/AN/AN/AOct 29, 2026
CVE-2026-107044: n/a: Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily…N/AN/AN/AOct 29, 2026
CVE-2026-107043: n/a: Insecure permissions in Code Catcher versionCode 131 allow unauthorized attackers to arbitrarily manipulate the app's…N/AN/AN/AOct 29, 2026
CVE-2025-12523: Centreon: Broken Object Level Authorization in Users Configuration Endpoint allows Information Disclosure to authenticated user6.5 MediumN/AN/AOct 29, 2026
CVE-2023-7357: Revera FlexNet Publisher: A remote code execution (RCE) vulnerability was identified in the FlexNet Publisher lmadmin web user interfaceN/A8.6 HighN/AOct 29, 2026
CVE-2026-96203: Microsoft Microsoft Edge (Chromium-based): Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.8.8 HighN/AN/AOct 29, 2026
CVE-2026-96199: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96198: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96196: Microsoft Microsoft Edge (Chromium-based): Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96192: Microsoft Microsoft Edge (Chromium-based): Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 29, 2026
26-50 of 538495