The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-78845: n/a: Aidot products Linkind Matter Smart Plug 1.01.32, OREiN Matter Smart Light Bulb 3.15.21, and Linkind Wi-Fi Smart Light…N/AN/AN/AOct 27, 2026
CVE-2026-117604: getgrav grav: Grav from 1.7.53.3 before 1.7.53.6 contains an authorization bypass in Debugger::isDebuggerRequestAuthorized() that…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-117507: a2aproject a2a-java: A security vulnerability has been detected in a2aproject a2a-java up to 1.2.0.Final5.4 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-117506: a2aproject a2a-java: A weakness has been identified in a2aproject a2a-java up to 1.2.0.Final4.3 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-117505: a2aproject a2a-java: A security flaw has been discovered in a2aproject a2a-java up to 1.2.0.Final4.3 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-105987: KGS Software tia Viewer: KGS Software tia Viewer is vulnerable to Stored XSS via the annotation APIN/A5.1 MediumN/AOct 27, 2026
CVE-2026-111583: TeamViewer: Improper access control in the installer staging directory used by TeamViewer Full Client and Host prior to version…7.3 HighN/AN/AOct 27, 2026
CVE-2026-111582: TeamViewer Remote Management - Monitoring: A DLL loading vulnerability in the TeamViewer Remote Management Monitoring installer for Windows prior to version…7.3 HighN/AN/AOct 27, 2026
CVE-2026-92377: TeamViewer: Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92376: TeamViewer Remote Management - Monitoring: Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92375: TeamViewer: An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92374: TeamViewer: A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92372: TeamViewer Full Client: An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-94347: Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions…7.2 HighN/AN/AOct 27, 2026
CVE-2026-94346: Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions…7.2 HighN/AN/AOct 27, 2026
CVE-2026-90727: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…3.8 LowN/AN/AOct 27, 2026
CVE-2026-90726: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…6.0 MediumN/AN/AOct 27, 2026
CVE-2026-90725: Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through…4.9 MediumN/AN/AOct 27, 2026
CVE-2026-68866: Dell PowerProtect Data Domain: PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through…6.5 MediumN/AN/AOct 27, 2026
CVE-2026-16307: Netiket Information Technologies EdoWEB: Authorization bypass through User-Controlled key vulnerability in Netiket Information Technologies EdoWEB allows…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-12887: Octopus Deploy Octopus Server: In affected versions of Octopus Server, a user with permission to upload a malicious nuget package is able to deploy a…N/A5.1 MediumN/AOct 27, 2026
CVE-2026-118027: Mozilla Firefox: Frame poisoning in the Layout componentN/AN/AN/AOct 27, 2026
CVE-2026-118026: Mozilla Firefox: Invalid pointer in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-118025: Mozilla Firefox: Other issue in the SVG componentN/AN/AN/AOct 27, 2026
CVE-2026-118024: Mozilla Firefox: Use-after-free in the Graphics: Text componentN/AN/AN/AOct 27, 2026
26-50 of 522616