The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-105612: Missing Authorization3.5 LowN/A0%Oct 28, 2026
CVE-2026-84725: Inclusion of Functionality from Untrusted Control Sphere8.1 HighN/A0%Oct 28, 2026
Red Hat: CVE-2026-93536: xorg-x11-server: xorg-x11-server: Denial of Service via use-after-free in gesture event handling5.3 MediumN/A0%Oct 28, 2026
Red Hat: CVE-2026-93524: xorg-x11-server: xorg-x11-server: information disclosure via crafted keyboard mapping requestsN/A6.9 Medium0%Oct 28, 2026
Alma Linux: CVE-2026-93523: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/A0%Oct 28, 2026
CVE-2026-88967: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Oct 28, 2026
CVE-2026-88858: Uncontrolled Recursion6.5 MediumN/A0%Oct 28, 2026
CVE-2026-83525: Use of Incorrect OperatorN/AN/A0%Oct 28, 2026
CVE-2026-82962: Out-of-bounds Write6.5 MediumN/A0%Oct 28, 2026
CVE-2026-82961: Out-of-bounds Write7.8 HighN/A0%Oct 28, 2026
CVE-2026-118619: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Oct 28, 2026
CVE-2026-118618: Improper Control of Generation of Code7.8 HighN/A0%Oct 28, 2026
CVE-2026-118617: Deserialization of Untrusted Data7.8 HighN/A0%Oct 28, 2026
CVE-2026-118616: Improper Control of Generation of Code7.8 HighN/A0%Oct 28, 2026
CVE-2026-118615: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 28, 2026
CVE-2026-118614: Improper Control of Generation of Code7.8 HighN/A0%Oct 28, 2026
CVE-2026-118613: Deserialization of Untrusted Data7.8 HighN/A0%Oct 28, 2026
CVE-2026-118611: Heap-based Buffer Overflow6.8 MediumN/A0%Oct 28, 2026
CVE-2026-118610: Stack-based Buffer Overflow8.8 HighN/A0%Oct 28, 2026
CVE-2026-118609: Stack-based Buffer Overflow6.8 MediumN/A0%Oct 28, 2026
CVE-2026-118608: Out-of-bounds Read3.5 LowN/A0%Oct 28, 2026
CVE-2026-118607: Improper Neutralization of Special Elements used in an OS Command6.8 MediumN/A1%Oct 28, 2026
CVE-2026-118606: Exposed Dangerous Method or Function8.8 HighN/A0%Oct 28, 2026
CVE-2026-118605: Stack-based Buffer Overflow8.0 HighN/A0%Oct 28, 2026
CVE-2026-118604: Stack-based Buffer Overflow6.8 MediumN/A0%Oct 28, 2026
1026-1050 of 520238