The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-55309: Google Android: In multiple functions of verifier.rs, there is a possible way to bypass secure boot signature verification via fault…N/AN/AN/ANov 10, 2026
CVE-2026-55297: Google Android: In handle_chan_msg of tipc_virtio_dev.c, there is a possible way to bypass memory tag access controls via concurrent…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-50080: BlackBerry Ltd: Stack-based Buffer Overflow in the ACPI event handler of the QVM could allow an attacker in a guest to crash the QVM by…3.3 LowN/AN/ANov 10, 2026
CVE-2026-50079: BlackBerry Ltd: Time-of-check Time-of-use (TOCTOU) Race Condition in the virtio network virtual device could allow an attacker in the…3.3 LowN/AN/ANov 10, 2026
CVE-2026-50078: BlackBerry Ltd: Out-Of-Bounds Read in the MSI-X table in the QVM could allow an attacker in the guest to cause an information…4.4 MediumN/AN/ANov 10, 2026
CVE-2026-50077: BlackBerry Ltd: Invalid Memory Access via the MSI-X table in QVM could allow an attacker in the guest to execute arbitrary code in the…7.7 HighN/AN/ANov 10, 2026
CVE-2026-26248: Fortinet: A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet…8.8 HighN/AN/ANov 10, 2026
CVE-2026-14447: Google Android: In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an…N/AN/AN/ANov 10, 2026
CVE-2026-126062: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming language3.7 LowN/AN/ANov 10, 2026
CVE-2026-126061: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.3 MediumN/AN/ANov 10, 2026
CVE-2026-125341: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework2.0 LowN/AN/ANov 10, 2026
CVE-2026-125340: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.5 MediumN/AN/ANov 10, 2026
CVE-2026-125339: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework6.1 MediumN/AN/ANov 10, 2026
CVE-2026-125338: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.5 MediumN/AN/ANov 10, 2026
CVE-2026-125337: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework8.3 HighN/AN/ANov 10, 2026
CVE-2026-124848: Amazon Kiro CLI: Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and…5.5 Medium6.8 MediumN/ANov 10, 2026
CVE-2026-124016: postalsys postal-mime: postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauthenticated…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121530: Fortinet FortiOS: A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-121529: Fortinet: A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-121371: Arista Networks EOS: On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated,…7.5 High8.7 HighN/ANov 10, 2026
CVE-2026-121370: Arista Networks EOS: On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker…8.6 High9.2 CriticalN/ANov 10, 2026
CVE-2026-121369: Arista Networks EOS: On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the…5.3 Medium6.7 MediumN/ANov 10, 2026
CVE-2026-121368: Arista Networks EOS: On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or…8.6 High8.9 HighN/ANov 10, 2026
CVE-2026-121367: Arista Networks EOS: On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain…9.6 Critical6.1 MediumN/ANov 10, 2026
CVE-2026-121295: Arista Networks EOS: On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted…8.6 High9.2 CriticalN/ANov 10, 2026
501-525 of 428494