The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116587: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…7.5 HighN/AN/AOct 26, 2026
CVE-2026-116586: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-116585: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-116515: itsourcecode Online Book Store: A security vulnerability has been detected in itsourcecode Online Book Store 1.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116514: itsourcecode Airline Reservation System: A weakness has been identified in itsourcecode Airline Reservation System 1.04.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116508: TOTOLINK A950RG: A security flaw has been discovered in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-116507: TOTOLINK A950RG: A vulnerability was identified in TOTOLINK A950RG 4.1.2cu.5268_B202211045.3 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116745: qloapps: QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that…6.5 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116744: ntop nDPI: ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116733: dvidelabs flatcc: flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-86992: Apple: The issue was addressed with improved memory handlingN/AN/AN/AOct 26, 2026
CVE-2026-86991: Apple: A buffer overflow was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-86990: Apple: An access issue was addressed with improved access restrictionsN/AN/AN/AOct 26, 2026
CVE-2026-86989: Apple iOS and iPadOS: An authorization issue was addressed with improved state managementN/AN/AN/AOct 26, 2026
CVE-2026-86988: Apple: The issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86987: Apple iOS and iPadOS: An authorization issue was addressed with improved entitlement checksN/AN/AN/AOct 26, 2026
CVE-2026-86986: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/AOct 26, 2026
CVE-2026-86985: Apple: This issue was addressed with improved input validationN/AN/AN/AOct 26, 2026
CVE-2026-86984: Apple macOS: A file access issue existed with certain home folder filesN/AN/AN/AOct 26, 2026
CVE-2026-86978: Apple: This issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86974: Apple: A type confusion issue was addressed with improved checksN/AN/AN/AOct 26, 2026
CVE-2026-86973: Apple: An out-of-bounds read was addressed with improved bounds checkingN/AN/AN/AOct 26, 2026
CVE-2026-86972: Apple: A buffer overflow was addressed with improved size validationN/AN/AN/AOct 26, 2026
CVE-2026-86971: Apple: An out-of-bounds write issue was addressed with improved bounds checking6.5 MediumN/AN/AOct 26, 2026
CVE-2026-86970: Apple: An out-of-bounds read was addressed with improved input validationN/AN/AN/AOct 26, 2026
576-600 of 522616