The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-96406: Eclipse Foundation Eclipse ThreadX - USBX: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of…4.9 MediumN/A0%Oct 20, 2026
CVE-2026-93446: Apache Tomcat: Low: Possible TLS 1.3 connection failuresN/AN/A0%Oct 20, 2026
CVE-2026-91041: Eclipse Foundation Eclipse ThreadX - FileX: Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log…7.8 HighN/A0%Oct 20, 2026
Red Hat: CVE-2026-88041: tomcat: tomcat: Information disclosure via incomplete HTTP trailer cleanupN/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-80353: tomcat: tomcat: Unauthorized socket access via TOCTOU race conditionN/AN/A0%Oct 20, 2026
CVE-2026-74049: Apache Tomcat: Low: Jasper JSTL <c:redirect> plug-in implementation omits page abort (SKIP_PAGE)N/AN/A0%Oct 20, 2026
Red Hat: CVE-2026-74048: tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failureN/AN/A0%Oct 20, 2026
CVE-2026-113396: DrayTek Vigor2960: A weakness has been identified in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 Low2%Oct 20, 2026
CVE-2026-113395: DrayTek Vigor2960: A security flaw has been discovered in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 Low0%Oct 20, 2026
CVE-2026-113394: DrayTek Vigor2960: A vulnerability was identified in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 Low0%Oct 20, 2026
CVE-2026-113393: DrayTek Vigor2960: A vulnerability was determined in DrayTek Vigor2960 1.5.1.6 Revision 82186.3 Medium2.1 Low0%Oct 20, 2026
CVE-2026-103119: Apache Tomcat: Important: AJP response mix-up9.1 CriticalN/A1%Oct 20, 2026
Red Hat: CVE-2026-101356: tomcat: tomcat: Information disclosure via incorrect object recycling in HTTP/2 processing9.1 CriticalN/A0%Oct 20, 2026
Red Hat: CVE-2026-101296: tomcat: tomcat: Authentication bypass via non-GSSAPI SASL in JNDI realmN/A9.1 Critical1%Oct 20, 2026
CVE-2026-34485: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express (GX) is vulnerable to a CLI ACL Bypass vulnerability where a low-privileged authenticated…N/AN/A0%Oct 20, 2026
CVE-2026-34484: Nokia Nokia 1830 Global Express (GX): Nokia 1830 Global Express GX is vulnerable to a local privilege escalation vulnerability which exists in the…N/AN/A0%Oct 20, 2026
CVE-2026-113620: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, operator WebSocket upgrades on the exec and log routes do not…9.8 CriticalN/A0%Oct 20, 2026
CVE-2026-113619: Eclipse Foundation Eclipse ioFog: In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template…7.5 HighN/A0%Oct 20, 2026
Oracle Linux: CVE-2026-113470: ELSA-2026-500449: ca-certificates security update (IMPORTANT) (Multiple Advisories)5.4 MediumN/A0%Oct 20, 2026
CVE-2026-113401: MFSA2026-114 Thunderbird: Security Vulnerabilities fixed in Thunderbird 158.0.16.5 MediumN/A0%Oct 20, 2026
CVE-2026-113400: MFSA2026-114 Thunderbird: Security Vulnerabilities fixed in Thunderbird 158.0.15.4 MediumN/A0%Oct 20, 2026
CVE-2026-113399: MFSA2026-114 Thunderbird: Security Vulnerabilities fixed in Thunderbird 158.0.1N/AN/A0%Oct 20, 2026
CVE-2026-113392: DrayTek Vigor2960: A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 Low0%Oct 20, 2026
CVE-2026-113391: DrayTek Vigor2960: A vulnerability has been found in DrayTek Vigor2960 1.5.1.6 Revision 82189.9 Critical8.6 High2%Oct 20, 2026
CVE-2026-113390: DrayTek Vigor2960: A flaw has been found in DrayTek Vigor2960 1.5.1.6 Revision 82189.9 Critical8.6 High2%Oct 20, 2026
5426-5450 of 417096