The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-104597: n/a: libosmocore through 1.14.1 contains an out-of-bounds read in iuup_rx_initialization() in src/gsm/iuup.cN/AN/AN/AOct 26, 2026
CVE-2026-104596: n/a: libosmocore through 1.14.1 contains out-of-bounds reads in the GSM 04.80 supplementary-service component parsers in…N/AN/AN/AOct 26, 2026
CVE-2014-125135: n/a OctoPrint: A security vulnerability has been detected in OctoPrint 1.0.0/1.1.07.3 High6.9 MediumN/AOct 26, 2026
CVE-2026-116502: turboderp-org ExLlamaV2: A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.24.4 Medium4.8 MediumN/AOct 26, 2026
CVE-2026-116575: mem0ai mem0: Mem0 provides persistent memory infrastructure for AI agents and applications6.3 MediumN/AN/AOct 26, 2026
CVE-2026-116671: Xpdf: Infinite loop in Xpdf 4.06 and earlier, due to incorrect validation of progression order field in JPEG 2000 image.N/A2.1 LowN/AOct 26, 2026
CVE-2026-116638: n/a: The Windows Recovery Environment (WinRE) in Windows 10 and 11 may allow an attacker to bypass firmware security…N/AN/AN/AOct 26, 2026
CVE-2026-116632: Mozilla Firefox for iOS: A malicious web page could insert arbitrary text into the FaceTime call prompt shown by iOS, potentialy allowing it to…5.4 MediumN/AN/AOct 26, 2026
CVE-2026-116631: Mozilla Firefox for iOS: A malicious web page could open a tel link in a window that was showing a different website, causing the phone-call…5.4 MediumN/AN/AOct 26, 2026
CVE-2026-116476: a2aproject a2a-dotnet: A weakness has been identified in a2aproject a2a-dotnet up to 1.0.0-preview35.4 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116471: BKWLD Decoy: A security flaw has been discovered in BKWLD Decoy up to 5.11.14.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116467: ggml-org llama.cpp: A security flaw has been discovered in ggml-org llama.cpp up to 0.7.05.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-110720: HashiCorp Tooling: Consul-k8s versions 0.42.0 and later are vulnerable to a cross-namespace authorization bypass in component ACL binding…9.9 CriticalN/AN/AOct 26, 2026
CVE-2026-104594: n/a: libosmocore through 1.14.1 contains out-of-bounds reads in the IPA CCM identity-tag parsers in src/gsm/ipa.cN/AN/AN/AOct 26, 2026
CVE-2026-104593: n/a: osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.cN/AN/AN/AOct 26, 2026
CVE-2026-104592: n/a: libosmocore through 1.14.1 contains an out-of-bounds read in the CBSP WRITE-REPLACE decoder in src/gsm/cbsp.cN/AN/AN/AOct 26, 2026
CVE-2026-104591: n/a: libosmocore through 1.14.1 contains a buffer overflow in osmo_iuup_compute_payload_crc() in src/gsm/iuup.cN/AN/AN/AOct 26, 2026
CVE-2026-81509: nosduco nforwardauth: nforwardauth is a forward auth service that allows the use of a single authentication middleware for multiple sites6.1 MediumN/AN/AOct 26, 2026
CVE-2026-72758: NLnet Labs Routinator: When parsing an AS range in Routinator, if the maximum value of the range is smaller than the minimum value of the…7.5 HighN/AN/AOct 26, 2026
CVE-2026-72757: NLnet Labs Routinator: Routinator runs out of open connections on the HTTP server when many connections are opened but never closed, leaving…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-72756: NLnet Labs Routinator: Routinator exits when an rsync URI for a file obtained over RRDP contains a path that cannot be stored on disk, such as…7.5 HighN/AN/AOct 26, 2026
CVE-2026-72755: NLnet Labs Routinator: Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a…3.8 LowN/AN/AOct 26, 2026
CVE-2026-72754: NLnet Labs Routinator: When Routinator encounters a CRL with many entries, it may hang or run out of memory7.5 HighN/AN/AOct 26, 2026
CVE-2026-72753: NLnet Labs Routinator: When Routinator encounters an RRDP notification file with gaps in the delta entries, it is still accepted and parsed,…8.2 HighN/AN/AOct 26, 2026
CVE-2026-72752: NLnet Labs Routinator: Routinator runs out of memory when the JSON output is requested many times concurrently6.5 MediumN/AN/AOct 26, 2026
26-50 of 416032