The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107080: n/a: OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in…N/AN/AN/AOct 26, 2026
CVE-2026-99099: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The…N/AN/AN/AOct 26, 2026
CVE-2026-99098: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode…N/AN/AN/AOct 26, 2026
CVE-2026-99097: Linux: In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in…N/AN/AN/AOct 26, 2026
CVE-2026-99096: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from…N/AN/AN/AOct 26, 2026
CVE-2026-99095: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D…N/AN/AN/AOct 26, 2026
CVE-2026-99094: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds…N/AN/AN/AOct 26, 2026
CVE-2026-99093: Linux: In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table…N/AN/AN/AOct 26, 2026
CVE-2026-99092: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem…N/AN/AN/AOct 26, 2026
CVE-2026-99091: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands…N/AN/AN/AOct 26, 2026
CVE-2026-99090: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against…N/AN/AN/AOct 26, 2026
CVE-2026-99089: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to…N/AN/AN/AOct 26, 2026
CVE-2026-99088: Linux: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header…N/AN/AN/AOct 26, 2026
CVE-2026-94386: Apache Software Foundation Apache Camel: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-93850: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-93849: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-93848: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery…2.7 LowN/AN/AOct 26, 2026
CVE-2026-93847: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and…3.5 LowN/AN/AOct 26, 2026
CVE-2026-93328: Google Cloud MCP Toolbox for Databases (googleapis/mcp-toolbox): Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Databases…N/A9.3 CriticalN/AOct 26, 2026
CVE-2026-92171: Red Hat Red Hat Data Grid 8: A flaw was found in the Infinispan Operator for Red Hat Data Grid6.5 MediumN/AN/AOct 26, 2026
CVE-2026-90885: Apache Software Foundation Apache Camel: Improper Restriction of XML External Entity Reference vulnerability in Apache Camel Saxon component7.5 HighN/AN/AOct 26, 2026
CVE-2026-77062: boneIO: The boneIO Black web interface lacks proper clickjacking protectionsN/A6.9 MediumN/AOct 26, 2026
CVE-2026-77061: boneIO: boneIO Black directly excludes several API endpoints from the authenticationN/A5.3 MediumN/AOct 26, 2026
CVE-2026-77060: boneIO black_debian_images: boneIO black_debian_images stores the Mosquitto MQTT broker password file at /etc/mosquitto/passwd with world-readable…N/A6.8 MediumN/AOct 26, 2026
CVE-2026-77059: boneIO: boneIO Black contains a TOCTOU race condition in the create_timedatectl_sudoers_file() function in…N/A8.8 HighN/AOct 26, 2026
526-550 of 416032