The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116844: fclairamb ftpserverlib: Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only…4.8 Medium6.3 MediumN/AOct 27, 2026
CVE-2026-116843: mistralai mistral-vibe: Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by…8.8 High8.7 HighN/AOct 27, 2026
CVE-2026-116842: diasurgical DevilutionX: DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup…6.1 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116841: diasurgical DevilutionX: DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq…5.5 Medium6.8 MediumN/AOct 27, 2026
CVE-2026-116840: ggml-org llama.cpp: llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the…6.1 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116839: Ubiquiti Inc airMAX M: A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…7.1 HighN/AN/AOct 27, 2026
CVE-2026-116838: Ubiquiti Inc airMAX M: A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF)…8.8 HighN/AN/AOct 27, 2026
CVE-2026-116837: Ubiquiti Inc: A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in…8.8 HighN/AN/AOct 27, 2026
CVE-2026-116836: Ubiquiti Inc airMAX M: A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site…8.8 HighN/AN/AOct 27, 2026
CVE-2026-116829: ggml-org llama.cpp: llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows…6.6 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116816: ggml-org llama.cpp: llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that…7.8 High8.5 HighN/AOct 27, 2026
CVE-2026-116623: code-projects Simple Content Management System: A vulnerability was detected in code-projects Simple Content Management System 1.07.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-116620: Tencent RapidJSON: A security vulnerability has been detected in Tencent RapidJSON up to 1.1.07.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-116608: DAMO Academy VideoLLaMA2: A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.15.4 Medium2.1 LowN/AOct 27, 2026
CVE-2026-116605: SourceCodester Online Food Ordering System: A vulnerability was found in SourceCodester Online Food Ordering System 1.05.3 Medium5.5 MediumN/AOct 27, 2026
CVE-2025-71439: ggml-org llama.cpp: llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows…5.5 Medium6.8 MediumN/AOct 27, 2026
CVE-2024-58400: ggml-org llama.cpp: llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal…8.2 High8.8 HighN/AOct 27, 2026
CVE-2024-58399: ggml-org llama.cpp: llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read…6.1 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116828: yeswiki: YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but…4.9 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116827: yeswiki: YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile()…6.8 Medium8.2 HighN/AOct 27, 2026
CVE-2026-116826: yeswiki: YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that…6.8 Medium8.2 HighN/AOct 27, 2026
CVE-2026-116825: yeswiki: YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never…6.5 Medium8.3 HighN/AOct 27, 2026
CVE-2026-116824: yeswiki: YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116823: yeswiki: YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116822: yeswiki: YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers…5.3 Medium6.9 MediumN/AOct 27, 2026
526-550 of 522616