The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119342: Stirling-Tools Stirling-PDF: Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files5.3 MediumN/AN/AOct 30, 2026
CVE-2026-119341: tesseract-ocr tesseract: Tesseract is an open source OCR engine0.0 NoneN/AN/AOct 30, 2026
CVE-2026-119340: tesseract-ocr tesseract: Tesseract is an open source OCR engine5.5 MediumN/AN/AOct 30, 2026
CVE-2026-119339: tesseract-ocr tesseract: Tesseract is an open source OCR engine5.5 MediumN/AN/AOct 30, 2026
CVE-2026-119338: tesseract-ocr tesseract: Tesseract is an open source OCR engineN/A6.9 MediumN/AOct 30, 2026
CVE-2026-117666: deadtrickster ssl_verify_fun: Improper Validation of Certificate with Host Mismatch vulnerability in deadtrickster ssl_verify_fun allows an adversary…N/A9.1 CriticalN/AOct 30, 2026
CVE-2026-117645: phoenixframework phoenix_html: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in phoenixframework…N/A5.3 MediumN/AOct 30, 2026
CVE-2026-16760: trailofbits fickling: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the…8.8 HighN/AN/AOct 30, 2026
CVE-2026-95673: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBERN/AN/AN/AOct 30, 2026
CVE-2026-78403: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and missing authorization vulnerability in Thales Sentinel Keys Server on Windows allows…9.8 Critical9.3 CriticalN/AOct 30, 2026
CVE-2026-78402: Thalesgroup Sentinel Keys Server: Stack-based buffer overflow and out-of-bounds write vulnerability in Thales Sentinel Keys Server on Windows allows…7.8 High7.3 HighN/AOct 30, 2026
CVE-2026-62337: axiom-crypto snark-verifier: SNARK Verifier is a generic (S)NARK verifierN/A6.9 MediumN/AOct 30, 2026
CVE-2026-62335: openvm-org openvm: OpenVM is a performant and modular zkVM framework built for customization and extensibilityN/A6.9 MediumN/AOct 30, 2026
CVE-2026-62334: openvm-org openvm: OpenVM is a performant and modular zkVM framework built for customization and extensibilityN/A8.7 HighN/AOct 30, 2026
CVE-2026-62333: openvm-org openvm: OpenVM is a performant and modular zkVM framework built for customization and extensibilityN/A8.7 HighN/AOct 30, 2026
CVE-2026-62302: franklioxygen MyTube: MyTube is a self-hosted downloader and player for several video websitesN/A8.7 HighN/AOct 30, 2026
CVE-2026-62301: franklioxygen MyTube: MyTube is a self-hosted downloader and player for several video websitesN/A7.1 HighN/AOct 30, 2026
CVE-2026-62284: osac-project osac-operator: OSAC operator is a Kubernetes operatorN/A8.6 HighN/AOct 30, 2026
CVE-2026-61850: akuity kargo: Kargo manages and automates the promotion of software artifactsN/A9.3 CriticalN/AOct 30, 2026
CVE-2026-61694: LeJamon go-xrpl: go-xrpl is a Go implementation of the XRP Ledger protocol3.7 LowN/AN/AOct 30, 2026
CVE-2026-61620: seancorfield honeysql: HoneySQL turns Clojure data structures into SQL9.8 CriticalN/AN/AOct 30, 2026
CVE-2026-61618: axiom-crypto snark-verifier: SNARK Verifier is a generic (S)NARK verifierN/A6.9 MediumN/AOct 30, 2026
CVE-2026-55598: madeofpendletonwool PinePods: PinePods is a complete, self-hosted podcast management system written in Rust9.1 CriticalN/AN/AOct 30, 2026
CVE-2026-55493: kohler hotcrp: HotCRP is conference review software6.5 MediumN/AN/AOct 30, 2026
CVE-2026-55098: Basekick-Labs arc: Arc is an open, SQL-native time-series database for telemetry6.5 MediumN/AN/AOct 30, 2026
26-50 of 418318