The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119190: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.4 HighN/AN/AOct 29, 2026
CVE-2026-119189: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119188: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119187: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-119186: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119200: nuxt, @nuxt: Nuxt is an open-source web development framework for Vue.js6.5 MediumN/AN/AOct 29, 2026
CVE-2026-119199: nuxt: Nuxt is an open-source web development framework for Vue.js5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119198: nuxt: Nuxt is an open-source web development framework for Vue.js5.9 MediumN/AN/AOct 29, 2026
CVE-2026-9536: vtk: A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-9535: vtk: A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk (version(s): 9.6.1)8.2 HighN/AN/AOct 29, 2026
CVE-2026-8824: vtk: A memory corruption vulnerability exists in the vtkBMPReader ExecuteDataWithInformation functionality of vtk…7.5 HighN/AN/AOct 29, 2026
CVE-2026-8822: vtk: A memory corruption vulnerability exists in the vtkDEMReader ReadProfiles functionality of vtk (version(s): 9.6.1)7.5 HighN/AN/AOct 29, 2026
CVE-2026-6877: ServiceNow ServiceNow AI Platform: ServiceNow has addressed a domain separation bypass security issue that was identified in the ServiceNow SR – CSM –…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-58120: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-58119: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-58118: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 29, 2026
CVE-2026-42057: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::vtkPNGReaderUpdate2 functionality of vtk 9.67.5 HighN/AN/AOct 29, 2026
CVE-2026-41216: vtk: An invalid pointer dereference vulnerability exists in the vtkPNGReader::ExecuteInformation functionality of vtk 9.67.5 HighN/AN/AOct 29, 2026
CVE-2026-119168: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration…8.8 HighN/AN/AOct 29, 2026
CVE-2026-118782: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-118781: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript2.9 LowN/AN/AOct 29, 2026
CVE-2026-118780: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript3.7 LowN/AN/AOct 29, 2026
CVE-2026-118779: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.5 HighN/AN/AOct 29, 2026
CVE-2026-118778: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript5.9 MediumN/AN/AOct 29, 2026
CVE-2026-118777: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript4.8 MediumN/AN/AOct 29, 2026
26-50 of 538495