The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-106484: Google chrome-devtools-mcp: Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local…4.4 MediumN/AN/AOct 28, 2026
CVE-2026-79656: Grafana: A user with read access to Grafana's server logs, or to a log store they are shipped to, can recover the OAuth and OIDC…6.0 MediumN/AN/AOct 28, 2026
CVE-2026-58458: Klei Entertainment Don't Starve Together: Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the…6.5 Medium6.9 MediumN/AOct 28, 2026
CVE-2026-118250: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
CVE-2026-118249: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
CVE-2026-118248: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A6.9 MediumN/AOct 28, 2026
CVE-2026-118247: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A6.9 MediumN/AOct 28, 2026
CVE-2026-118246: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-118245: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.6 HighN/AOct 28, 2026
CVE-2026-118244: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
CVE-2026-118243: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A5.3 MediumN/AOct 28, 2026
CVE-2026-118242: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.5 HighN/AOct 28, 2026
CVE-2026-117501: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 28, 2026
CVE-2026-117500: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 28, 2026
CVE-2026-116797: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.5 HighN/AOct 28, 2026
CVE-2026-116795: le0pard re2js: RE2JS is the JavaScript port of RE2, a regular expression engine that provides linear time matching7.5 HighN/AN/AOct 28, 2026
CVE-2026-116794: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementationN/A8.3 HighN/AOct 28, 2026
CVE-2026-116531: Improper Handling of Length Parameter InconsistencyN/AN/AN/AOct 28, 2026
CVE-2026-116285: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 28, 2026
CVE-2026-116273: Initialization of a Resource with an Insecure DefaultN/AN/AN/AOct 28, 2026
CVE-2026-116272: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-116271: Improper Link Resolution Before File AccessN/AN/AN/AOct 28, 2026
CVE-2026-116270: Inefficient Algorithmic ComplexityN/AN/AN/AOct 28, 2026
CVE-2026-116269: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-116268: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 28, 2026
601-625 of 538495