The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-78661: golang.org/x/net golang.org/x/net/html: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string…N/AN/AN/AOct 27, 2026
CVE-2026-57203: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.9 MediumN/AOct 27, 2026
CVE-2026-57199: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-57192: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.0 MediumN/AOct 27, 2026
CVE-2026-57191: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A8.2 HighN/AOct 27, 2026
CVE-2026-57190: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.0 HighN/AOct 27, 2026
CVE-2026-57186: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
Microsoft Edge (Chromium-based): CVE-2026-62765: Remote Code Execution Vulnerability7.5 HighN/AN/AOct 27, 2026
CVE-2026-85898: Access of Resource Using Incompatible Type8.8 HighN/AN/AOct 27, 2026
CVE-2026-83831: Double Free8.8 HighN/AN/AOct 27, 2026
CVE-2026-57200: asterisk, certified-asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-57195: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-39928: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
CVE-2026-116775: Allocation of Resources Without Limits or ThrottlingN/A2.3 LowN/AOct 27, 2026
CVE-2026-116774: Uncontrolled Resource Consumption4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116773: Allocation of Resources Without Limits or Throttling4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116696: Allocation of Resources Without Limits or Throttling3.3 LowN/AN/AOct 27, 2026
CVE-2026-116695: Interpretation ConflictN/A5.3 MediumN/AOct 27, 2026
CVE-2026-116694: Allocation of Resources Without Limits or ThrottlingN/A6.3 MediumN/AOct 27, 2026
CVE-2026-116693: Inefficient Regular Expression ComplexityN/A8.7 HighN/AOct 27, 2026
CVE-2026-116692: Improper Control of Generation of Code9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-116691: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116690: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/AN/AOct 27, 2026
CVE-2026-116689: Insertion of Sensitive Information Into Sent Data5.9 MediumN/AN/AOct 27, 2026
CVE-2026-116688: Improper Neutralization of Input During Web Page Generation8.1 HighN/AN/AOct 27, 2026
951-975 of 416436