The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-116370: 2K Games Sid Meier's Civilization IV: A security flaw has been discovered in 2K Games Sid Meier's Civilization IV 1.0.12.686.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-82390: zephyrproject zephyr: The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to…3.7 LowN/AN/AOct 26, 2026
CVE-2026-82389: zephyrproject zephyr: In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82388: zephyrproject zephyr: bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands-Free object with…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-19742: zephyrproject zephyr: The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers…3.7 LowN/AN/AOct 26, 2026
CVE-2026-81038: zephyrproject zephyr: The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send()…7.1 HighN/AN/AOct 26, 2026
CVE-2026-81039: zephyrproject zephyr: The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every…4.3 MediumN/AN/AOct 26, 2026
CVE-2026-116394: Magepeople inc. WpEvently: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc5.3 MediumN/AN/AOct 26, 2026
CVE-2026-115680: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data RetransmissionN/AN/AN/AOct 26, 2026
CVE-2026-115679: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX BufferN/AN/AN/AOct 26, 2026
CVE-2026-115678: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processingN/AN/AN/AOct 26, 2026
CVE-2026-99099: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The…N/AN/AN/AOct 26, 2026
CVE-2026-99098: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode…N/AN/AN/AOct 26, 2026
CVE-2026-99097: Linux: In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in…N/AN/AN/AOct 26, 2026
CVE-2026-99096: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from…N/AN/AN/AOct 26, 2026
CVE-2026-99095: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D…N/AN/AN/AOct 26, 2026
CVE-2026-99094: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds…N/AN/AN/AOct 26, 2026
CVE-2026-99093: Linux: In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table…N/AN/AN/AOct 26, 2026
CVE-2026-99092: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem…N/AN/AN/AOct 26, 2026
CVE-2026-99091: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands…N/AN/AN/AOct 26, 2026
CVE-2026-99090: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against…N/AN/AN/AOct 26, 2026
CVE-2026-99089: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to…N/AN/AN/AOct 26, 2026
CVE-2026-99088: Linux: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header…N/AN/AN/AOct 26, 2026
CVE-2026-94386: Apache Software Foundation Apache Camel: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-93847: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to validate reserved system post types on the scheduled post creation and…3.5 LowN/AN/AOct 26, 2026
51-75 of 546512
‹›