The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-116566: Python Software Foundation CPython: socket.getaddrinfo() previously accepted null bytes within *host* and *port* parameters which can cause the values to…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-107347: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during dispatch payload and executor log…8.4 HighN/AN/AOct 29, 2026
CVE-2026-102260: HashiCorp: HashiCorp Nomad and Nomad Enterprise are vulnerable to cross-namespace authorization bypasses in several read-only API…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-118769: randombit botan: Botan is a C++ cryptography libraryN/A9.2 CriticalN/AOct 29, 2026
CVE-2026-62374: openwallet-foundation: SD JWT JS is a JavaScript implementation of the Selective Disclosure JWT (SD-JWT) specificationN/A7.1 HighN/AOct 29, 2026
CVE-2026-11587: Centreon: SQL injection allowing an authenticated user with access to ACL management to read and modify the Centreon database7.2 HighN/AN/AOct 29, 2026
CVE-2026-119115: AWS aws-privateca-issuer: Incorrect authorization in the issuer resolution logic in AWS Private CA Connector for Kubernetes…8.5 High8.4 HighN/AOct 29, 2026
CVE-2026-118764: isaacs minimatch: minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objectsN/A8.7 HighN/AOct 29, 2026
CVE-2026-118763: sigstore sigstore-js: sigstore-js provides JavaScript libraries for interacting with Sigstore services7.4 HighN/AN/AOct 29, 2026
CVE-2026-118762: monkeytypegame monkeytype: Monkeytype is a minimalistic and customizable typing test9.3 CriticalN/AN/AOct 29, 2026
CVE-2026-118760: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows6.5 MediumN/AN/AOct 29, 2026
CVE-2026-118759: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows7.5 HighN/AN/AOct 29, 2026
CVE-2026-115805: Rapid7 Insight Agent: Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local…7.8 HighN/AN/AOct 29, 2026
CVE-2026-107060: n/a: Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to…N/AN/AN/AOct 29, 2026
CVE-2026-107059: n/a: An issue in Nextcloud versionCode 30390190 allows attackers to force victim users to logout of their accounts and…N/AN/AN/AOct 29, 2026
CVE-2026-107058: n/a: An issue in Shelter versionCode 445 allows attackers to register their own auth_key and execute a takeover of another…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-107057: n/a: An issue in AndBible versionCode 1111 allows attackers to execute arbitrary code via uploading a crafted module zip.N/AN/AN/AOct 29, 2026
CVE-2026-107056: n/a: Insecure permissions in the io.file.importer.ImportActivity component of OpenTracks versionCode 6751 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107055: n/a: Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107053: n/a: Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write…N/AN/AN/AOct 29, 2026
CVE-2026-107052: n/a: Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized…7.5 HighN/AN/AOct 29, 2026
CVE-2026-107051: n/a: Insecure permissions in klassm AndFHEM v2.4.1 (versionCode 241, the verified build) allows unauthorized attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107050: n/a: An issue in libretro RetroArch v1.22.2 allows attackers to force another user into loading attacker-supplied code in…N/AN/AN/AOct 29, 2026
CVE-2026-107049: n/a: An issue in Forkyz versionCode 8500000 allows attackers to arbitrarily change another user's storage settings via…N/AN/AN/AOct 29, 2026
CVE-2026-107048: n/a: An issue in the WebView rendering path component of MotionCreative Motion UI versionCode 101 allows attackers to…N/AN/AN/AOct 29, 2026
76-100 of 538495