The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116584: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.5 HighN/AN/AOct 26, 2026
CVE-2026-116583: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilitiesN/A5.3 MediumN/AOct 26, 2026
CVE-2026-116582: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities4.7 MediumN/AN/AOct 26, 2026
CVE-2026-116581: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.5 HighN/AN/AOct 26, 2026
CVE-2026-116580: lxsmnsyc seroval: Seroval facilitates JavaScript value stringification, including complex structures beyond JSON.stringify capabilities7.3 HighN/AN/AOct 26, 2026
CVE-2026-116579: crossbario autobahn-python: Autobahn Python is a WebSocket and WAMP implementation for Python that supports Twisted and asyncio5.9 MediumN/AN/AOct 26, 2026
CVE-2026-116578: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking libraryN/A2.1 LowN/AOct 26, 2026
CVE-2026-116577: tornadoweb tornado: Tornado is a Python web framework and asynchronous networking library5.3 MediumN/AN/AOct 26, 2026
CVE-2026-116576: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js7.8 HighN/AN/AOct 26, 2026
CVE-2026-116575: mem0ai mem0: Mem0 provides persistent memory infrastructure for AI agents and applications6.3 MediumN/AN/AOct 26, 2026
CVE-2026-116506: TOTOLINK A950RG: A vulnerability was determined in TOTOLINK A950RG 4.1.2cu.5268_B202211049.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116505: TOTOLINK A950RG: A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268_B202211049.1 Critical8.5 HighN/AOct 26, 2026
CVE-2026-116504: TOTOLINK A950RG: A vulnerability has been found in TOTOLINK A950RG 4.1.2cu.5268_B202211049.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116502: turboderp-org ExLlamaV2: A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.24.4 Medium4.8 MediumN/AOct 26, 2026
CVE-2026-113952: Apple: A logic issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-113950: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-113949: Apple: A type confusion issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-113948: Apple macOS: A permissions issue was addressed with additional restrictionsN/AN/AN/AOct 26, 2026
CVE-2026-113947: Apple macOS: This issue was addressed with improved access restrictions8.8 HighN/AN/AOct 26, 2026
CVE-2026-113946: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-113945: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-113944: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-113943: Apple macOS: An out-of-bounds write issue was addressed with improved bounds checking6.5 MediumN/AN/AOct 26, 2026
CVE-2026-113942: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-113941: Apple macOS: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
551-575 of 522616