The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-86915: Apple macOS: A race condition was addressed with improved lockingN/AN/A0%Oct 20, 2026
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory managementN/AN/A0%Oct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checksN/AN/A0%Oct 20, 2026
CVE-2026-86872: Apple: A logic issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validationN/AN/A0%Oct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/A0%Oct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictionsN/AN/A0%Oct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checksN/AN/A0%Oct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validationN/AN/A0%Oct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's accessN/AN/A0%Oct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state managementN/AN/A0%Oct 20, 2026
CVE-2026-65396: Apple macOS: A buffer overflow was addressed with improved size validationN/AN/A0%Oct 20, 2026
CVE-2026-65379: Apple macOS: The issue was addressed with improved handling of secure input stateN/AN/A0%Oct 20, 2026
CVE-2026-65372: Apple macOS: A race condition was addressed with additional validationN/AN/A0%Oct 20, 2026
CVE-2026-65356: Apple macOS: An access issue was addressed with improved access controlsN/AN/A0%Oct 20, 2026
CVE-2026-28854: Apple macOS: The issue was addressed with additional app bundle integrity checksN/AN/A0%Oct 20, 2026
CVE-2026-28853: Apple macOS: The issue was addressed with improved checksN/AN/A0%Oct 20, 2026
CVE-2026-8355: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows…5.4 MediumN/A0%Oct 20, 2026
CVE-2026-112373: H3C Magic NX15: A security vulnerability has been detected in H3C Magic NX15 NX15V100R0176.5 Medium5.7 Medium0%Oct 20, 2026
CVE-2026-109126: IBM: IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically…8.8 HighN/A0%Oct 20, 2026
CVE-2026-107400: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary…8.8 HighN/A1%Oct 20, 2026
CVE-2026-107366: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification8.3 HighN/A0%Oct 20, 2026
5001-5025 of 522616