The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115418: AWS aws-cdk/aws-redshift-alpha: SQL injection in the database-query custom resource handlers in the Amazon Web Services (AWS) Cloud Development Kit…7.3 High7.0 HighN/AOct 26, 2026
CVE-2026-114710: WP Chill Gallery PhotoBlocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Gallery…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-107091: n/a: An issue in HUION Inspiroy Frego S (L310) Windows Driver 20.0.1.118 allows a local attacker to execute arbitrary code…N/AN/AN/AOct 26, 2026
CVE-2026-106677: n/a: Homestay3 homestay-backend 0.0.1-SNAPSHOT contains an IDOR in ChatServiceImplN/AN/AN/AOct 26, 2026
CVE-2026-106676: n/a: qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to…N/AN/AN/AOct 26, 2026
CVE-2013-10077: n/a OctoPrint: A weakness has been identified in OctoPrint 1.0.05.3 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-93846: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the…3.8 LowN/AN/AOct 26, 2026
CVE-2026-85297: Google Cloud Cloud Run MCP: Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to…N/A7.7 HighN/AOct 26, 2026
CVE-2026-65226: Rejected reason: This CVE ID has been rejected by runZero as unused.N/AN/AN/AOct 26, 2026
CVE-2026-65222: Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-lifeN/AN/AN/AOct 26, 2026
CVE-2026-65221: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65218: Rejected reason: The reported issue is tracked under CVE-2026-18451N/AN/AN/AOct 26, 2026
CVE-2026-65217: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65216: Rejected reason: The reported issue is tracked under CVE-2026-18450N/AN/AN/AOct 26, 2026
CVE-2026-65215: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65214: Rejected reason: The reported issue is tracked under CVE-2026-18449N/AN/AN/AOct 26, 2026
CVE-2026-65212: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65203: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65202: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-116544: open5gs: Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116543: open5gs: Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows…7.5 High8.7 HighN/AOct 26, 2026
CVE-2026-116542: netty: Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116541: netty: Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116540: netty netty-tcnative: netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116539: netty: Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer…5.9 Medium8.2 HighN/AOct 26, 2026
76-100 of 416032