The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116367: DeepSeek Harness: A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.56.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-115748: Apache Software Foundation Apache Vysper: **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions8.8 HighN/AN/AOct 26, 2026
CVE-2026-115721: Apache Software Foundation Apache Vysper: **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of…7.5 HighN/AN/AOct 26, 2026
CVE-2026-115680: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115679: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115678: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing5.3 MediumN/AN/AOct 26, 2026
CVE-2026-112346: OpenHands OpenHands Software Agent SDK: OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the…9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-112344: Syncplify, Inc. Syncplify Server!: Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link…6.8 Medium7.6 HighN/AOct 26, 2026
CVE-2026-112343: Syncplify, Inc. Syncplify Server!: Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to…8.1 High8.6 HighN/AOct 26, 2026
CVE-2026-107090: n/a: An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary…N/AN/AN/AOct 26, 2026
CVE-2026-107080: n/a: OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in…N/AN/AN/AOct 26, 2026
CVE-2026-99099: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The…N/AN/AN/AOct 26, 2026
CVE-2026-99098: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode…N/AN/AN/AOct 26, 2026
CVE-2026-99097: Linux: In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in…N/AN/AN/AOct 26, 2026
CVE-2026-99096: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from…N/AN/AN/AOct 26, 2026
CVE-2026-99095: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D…N/AN/AN/AOct 26, 2026
CVE-2026-99094: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds…N/AN/AN/AOct 26, 2026
CVE-2026-99093: Linux: In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table…N/AN/AN/AOct 26, 2026
CVE-2026-99092: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem…N/AN/AN/AOct 26, 2026
CVE-2026-99091: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands…N/AN/AN/AOct 26, 2026
CVE-2026-99090: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against…N/AN/AN/AOct 26, 2026
CVE-2026-99089: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to…N/AN/AN/AOct 26, 2026
CVE-2026-99088: Linux: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header…N/AN/AN/AOct 26, 2026
CVE-2026-94386: Apache Software Foundation Apache Camel: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-93850: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume…6.5 MediumN/AN/AOct 26, 2026
551-575 of 416032