The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-108313: Tanium Tanium Server: Tanium addressed an incorrect privilege assignment vulnerability in Tanium Server.6.6 MediumN/AN/AOct 27, 2026
CVE-2026-108311: Tanium Tanium Server: Tanium addressed an insufficient logging vulnerability in Tanium Server.2.7 LowN/AN/AOct 27, 2026
CVE-2026-108310: Tanium Tanium Server: Tanium addressed a denial of service vulnerability in Tanium Server.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-108309: Tanium: Tanium addressed an uncontrolled resource consumption vulnerability in Performance Client Extension.5.5 MediumN/AN/AOct 27, 2026
CVE-2026-108308: Tanium Patch: Tanium addressed a SQL injection vulnerability in Patch.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108307: Tanium: Tanium addressed a heap-based buffer overflow vulnerability in Index.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108306: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108305: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108304: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108303: Tanium Certificate Manager: Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.8.8 HighN/AN/AOct 27, 2026
CVE-2026-108302: Tanium Comply: Tanium addressed an improper access controls vulnerability in Comply.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108301: Tanium Comply: Tanium addressed an improper access controls vulnerability in Comply.6.0 MediumN/AN/AOct 27, 2026
CVE-2026-102816: TP-Link Systems Inc. RE305 v3: An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3N/A5.3 MediumN/AOct 27, 2026
CVE-2026-102815: TP-Link Systems Inc. RE305 v3: An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3N/A6.9 MediumN/AOct 27, 2026
CVE-2026-102814: TP-Link Systems Inc. RE305 v3: An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3N/A8.7 HighN/AOct 27, 2026
CVE-2026-102813: TP-Link Systems Inc. RE305 v3: An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3N/A6.1 MediumN/AOct 27, 2026
CVE-2026-102812: TP-Link Systems Inc.: A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and…N/A6.9 MediumN/AOct 27, 2026
CVE-2026-87897: Nextcloud whiteboard: A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82986: Nextcloud Tables: The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82984: Nextcloud Server: When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-82983: Nextcloud Tables: The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting…3.3 LowN/AN/AOct 27, 2026
CVE-2026-77173: Nextcloud Files Confidential: A user could create a docx or odt file with a # in the filename with confidential information such as a credit card…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-77172: Nextcloud Server: App passwords were allowed to bypass password confirmation on sensitive endpoints.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-77171: Nextcloud Collectives: A public shared collective always allowed recipients of the link to create pages.3.5 LowN/AN/AOct 27, 2026
CVE-2026-77167: Nextcloud server: Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table7.5 HighN/AN/AOct 27, 2026
76-100 of 522616