The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-65216: Rejected reason: The reported issue is tracked under CVE-2026-18450N/AN/AN/AOct 26, 2026
CVE-2026-65215: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65214: Rejected reason: The reported issue is tracked under CVE-2026-18449N/AN/AN/AOct 26, 2026
CVE-2026-65212: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65203: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65202: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-116544: open5gs: Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116543: open5gs: Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows…7.5 High8.7 HighN/AOct 26, 2026
CVE-2026-116542: netty: Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116541: netty: Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116540: netty netty-tcnative: netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116539: netty: Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116538: mganss HtmlSanitizer: HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability…4.7 Medium2.3 LowN/AOct 26, 2026
CVE-2026-116489: timescale pgvectorscale: Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users…7.5 High7.7 HighN/AOct 26, 2026
CVE-2026-116369: Sunwood-ai-labs github-kanban-mcp-server: A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.06.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116368: DeepSeek Harness: A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.27.3 High6.9 MediumN/AOct 26, 2026
CVE-2026-116367: DeepSeek Harness: A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.56.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-115748: Apache Software Foundation Apache Vysper: **UNSUPPORTED WHEN ASSIGNED** Authorization bypass in Apache Vysper, all versions8.8 HighN/AN/AOct 26, 2026
CVE-2026-115721: Apache Software Foundation Apache Vysper: **UNSUPPORTED WHEN ASSIGNED** Unbounded allocation in XML parsing in Apache Vysper; all versions, may lead to an out of…7.5 HighN/AN/AOct 26, 2026
CVE-2026-115680: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow DHCPv6 Option-Walk Over-Reads and Unintended Data Retransmission6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115679: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.3.0 may allow out-of-bounds reads and writes to the FTP Server RX Buffer6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115678: Keil MDK-Middleware: Arm Keil MDK-Middleware 8.0.0-8.3.0 may allow pre-authentication out-of-bounds read in SNMP processing5.3 MediumN/AN/AOct 26, 2026
CVE-2026-112346: OpenHands OpenHands Software Agent SDK: OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the…9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-112344: Syncplify, Inc. Syncplify Server!: Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link…6.8 Medium7.6 HighN/AOct 26, 2026
CVE-2026-112343: Syncplify, Inc. Syncplify Server!: Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to…8.1 High8.6 HighN/AOct 26, 2026
76-100 of 546512