The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118643: n8n-io n8n: n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 stores credential secrets in execution error data when…8.2 High5.3 MediumN/AOct 28, 2026
CVE-2026-118642: n8n-io n8n: n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability that allows authenticated…7.1 High5.1 MediumN/AOct 28, 2026
CVE-2026-118641: n8n-io n8n: n8n before 1.123.85, 2.x before 2.43.5, and 2.44.x before 2.44.1 contains an OData $filter injection vulnerability in…7.5 High6.9 MediumN/AOct 28, 2026
CVE-2026-118640: n8n-io n8n: n8n before 1.123.85, 2.43.5, and 2.44.1 contains an authorization bypass vulnerability in Chat Hub that allows…5.4 Medium5.3 MediumN/AOct 28, 2026
CVE-2026-118633: Sophos SG UTM: A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM…8.1 High9.2 CriticalN/AOct 28, 2026
CVE-2026-118265: labstack echo: Echo is a Go web framework5.3 MediumN/AN/AOct 28, 2026
CVE-2026-118264: labstack echo: Echo is a Go web frameworkN/A9.1 CriticalN/AOct 28, 2026
CVE-2026-118263: labstack echo: Echo is a Go web frameworkN/A6.3 MediumN/AOct 28, 2026
CVE-2026-118262: labstack echo: Echo is a Go web frameworkN/A8.2 HighN/AOct 28, 2026
CVE-2026-118261: labstack echo: Echo is a Go web frameworkN/A8.2 HighN/AOct 28, 2026
CVE-2026-118260: labstack echo: Echo is a Go web frameworkN/A8.2 HighN/AOct 28, 2026
CVE-2026-118259: open-telemetry opentelemetry-java: opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-118258: i18next i18next-http-backend: i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno3.7 LowN/AN/AOct 28, 2026
CVE-2026-118257: intlify vue-i18n: Vue I18n is the internationalization plugin for Vue.js7.2 HighN/AN/AOct 28, 2026
CVE-2026-118256: intlify vue-i18n: Vue I18n is the internationalization plugin for Vue.jsN/A2.1 LowN/AOct 28, 2026
CVE-2026-118255: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-118254: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.6 HighN/AOct 28, 2026
CVE-2026-118253: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-118252: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-118251: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-106484: Google chrome-devtools-mcp: Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local…4.4 MediumN/AN/AOct 28, 2026
CVE-2026-79656: Grafana: A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC…6.0 MediumN/AN/AOct 28, 2026
CVE-2026-58458: Klei Entertainment Don't Starve Together: Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the…6.5 Medium6.9 MediumN/AOct 28, 2026
CVE-2026-118250: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
CVE-2026-118249: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
526-550 of 538495