The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57200: asterisk, certified-asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-57195: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-39928: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
CVE-2026-116775: Eugeny russh: pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate…N/A2.3 LowN/AOct 27, 2026
CVE-2026-116774: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116773: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116696: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation3.3 LowN/AN/AOct 27, 2026
CVE-2026-116695: rgrove crass: Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specificationN/A5.3 MediumN/AOct 27, 2026
CVE-2026-116694: open-telemetry opentelemetry-python: OpenTelemetry Python provides the Python API and SDK for OpenTelemetryN/A6.3 MediumN/AOct 27, 2026
CVE-2026-116693: DataDog dd-trace-js: dd-trace is the Datadog APM client for Node.jsN/A8.7 HighN/AOct 27, 2026
CVE-2026-116692: mlflow: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models9.8 CriticalN/AN/AOct 27, 2026
Microsoft Edge (Chromium-based): CVE-2026-85898: Remote Code Execution Vulnerability8.8 HighN/AN/AOct 27, 2026
Microsoft Edge (Chromium-based): CVE-2026-83831: Remote Code Execution Vulnerability8.8 HighN/AN/AOct 27, 2026
CVE-2026-116691: mlflow: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116690: mlflow: MLflow is an open source AI engineering platform for agents, large language models, and machine learning models7.5 HighN/AN/AOct 27, 2026
CVE-2026-116689: follow-redirects: follow-redirects is a Node.js HTTP and HTTPS client wrapper that automatically follows redirects5.9 MediumN/AN/AOct 27, 2026
CVE-2026-116688: ckeditor ckeditor5: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture8.1 HighN/AN/AOct 27, 2026
CVE-2026-116687: ckeditor ckeditor5: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture3.1 LowN/AN/AOct 27, 2026
CVE-2026-116686: modelcontextprotocol python-sdk: The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116685: modelcontextprotocol python-sdk: The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients5.9 MediumN/AN/AOct 27, 2026
CVE-2026-116684: modelcontextprotocol python-sdk: The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients6.8 MediumN/AN/AOct 27, 2026
CVE-2026-112355: MembershipWorks: The MembershipWorks plugin for WordPress before 6.17 contains an information disclosure vulnerability that allows…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-112352: Sunhillo Corporation SureLine: Sunhillo SureLine before 9.1.5 contains an authentication bypass vulnerability that allows an unauthenticated remote…9.1 Critical9.1 CriticalN/AOct 27, 2026
CVE-2026-112351: Sunhillo Corporation SureLine: Sunhillo SureLine before 9.1.5 contains an OS command injection vulnerability in the networkDiag.cgi endpoint that…8.8 High8.7 HighN/AOct 27, 2026
CVE-2026-112350: Sunhillo Corporation SureLine: Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows…7.5 High8.7 HighN/AOct 27, 2026
876-900 of 413066