The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-115968: Deserialization of Untrusted Data9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-115603: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/AN/AOct 28, 2026
CVE-2026-115590: Deserialization of Untrusted Data7.2 HighN/AN/AOct 28, 2026
CVE-2026-105420: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 CriticalN/AOct 28, 2026
Alma Linux: CVE-2026-93516: Important: xorg-x11-server security update (Multiple Advisories)5.5 MediumN/AN/AOct 28, 2026
Red Hat: CVE-2026-93515: xorg-x11-server: xorg-x11-server: Denial of Service via cross-window notification use-after-freeN/A6.8 MediumN/AOct 28, 2026
CVE-2026-67080: HCL Software BigFix AEX: HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-67079: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application…6.4 MediumN/AN/AOct 28, 2026
CVE-2026-67077: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the…4.2 MediumN/AN/AOct 28, 2026
CVE-2026-67074: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Remote Code Execution Vulnerability 9.1 CriticalN/AN/AOct 28, 2026
CVE-2026-67073: HCL Software BigFix AEX: HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability8.6 HighN/AN/AOct 28, 2026
CVE-2026-55369: walinejs waline: Waline is a comment system with backend support6.5 MediumN/AN/AOct 28, 2026
CVE-2026-21830: Improper Input Validation3.7 LowN/AN/AOct 28, 2026
CVE-2026-118040: Improper Verification of Cryptographic Signature7.5 HighN/AN/AOct 28, 2026
CVE-2026-118039: Improper Restriction of XML External Entity Reference7.5 HighN/AN/AOct 28, 2026
CVE-2026-118038: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/AN/AOct 28, 2026
CVE-2026-118037: Uncontrolled Recursion7.5 HighN/AN/AOct 28, 2026
CVE-2026-118036: Uncontrolled Recursion7.5 HighN/AN/AOct 28, 2026
CVE-2026-118035: Uncontrolled Recursion7.5 HighN/AN/AOct 28, 2026
CVE-2026-116404: Missing Authorization6.5 MediumN/AN/AOct 28, 2026
CVE-2026-116393: Missing Authorization7.5 HighN/AN/AOct 28, 2026
CVE-2026-116392: Deserialization of Untrusted Data7.2 HighN/AN/AOct 28, 2026
CVE-2026-116391: Deserialization of Untrusted Data8.8 HighN/AN/AOct 28, 2026
CVE-2026-115957: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/AOct 28, 2026
CVE-2026-115904: Improper Neutralization of Special Elements used in an OS Command9.6 CriticalN/AN/AOct 28, 2026
1001-1025 of 413704