The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-0175: Google Android: In multiple locations, there is a possible way to bypass key authorization policies during wrapped key import due to a…N/AN/AN/ANov 10, 2026
CVE-2026-0169: Google Android: In multiple functions of Android.bp, there is a possible way to bind to a privileged debug overlay service due to test…N/AN/AN/ANov 10, 2026
Fortinet FortiManager: CVE-2025-61625: Arbitrary file write and delete in JSON API8.1 HighN/AN/ANov 10, 2026
CVE-2026-121529: Fortinet: A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0…9.1 CriticalN/AN/ANov 10, 2026
CVE-2026-99288: Undefined Security WeaknessN/AN/AN/ANov 10, 2026
CVE-2026-99287: Undefined Security WeaknessN/AN/AN/ANov 10, 2026
CVE-2026-99286: Undefined Security WeaknessN/AN/AN/ANov 10, 2026
CVE-2026-95692: Out-of-bounds ReadN/AN/AN/ANov 10, 2026
CVE-2026-95691: Use After FreeN/AN/AN/ANov 10, 2026
CVE-2026-88823: Missing Cryptographic StepN/AN/AN/ANov 10, 2026
CVE-2026-88822: Use of Uninitialized VariableN/AN/AN/ANov 10, 2026
CVE-2026-54437: BlackBerry Ltd QNX Software Development Platform: Improper Input Validation in the io-char library's DCMD_CHR_TCINJECTC devctl() handler could allow an attacker with…6.2 MediumN/AN/ANov 10, 2026
CVE-2026-54436: BlackBerry Ltd QNX Software Development Platform: Heap-based Buffer Overflow in the io-char library's DCMD_CHR_WAITINFO devctl() handler could allow an attacker with…7.4 HighN/AN/ANov 10, 2026
CVE-2026-40275: BlackBerry Ltd: Heap-based Buffer Overflow in the DCMD_PROC_EVENT handler of the procnto could allow an attacker with local access to…8.4 HighN/AN/ANov 10, 2026
CVE-2026-40274: BlackBerry Ltd: Invalid Pointer Reference in the TimerSettime() system call could allow an attacker with local access to arm a crafted…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-40273: BlackBerry Ltd: Improper Input Validation in a procnto message handler could allow an attacker with local access to send a crafted…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-18448: TianoCore EDK2: EDK2 contains a vulnerability in BIOS where a privileged attacker may cause “Exposure of Sensitive Information during…N/A5.6 MediumN/ANov 10, 2026
CVE-2026-14968: TianoCore EDK2: EDK2 contains vulnerabilities in BIOS where skilled and privileged users or attackers may cause “Out-of-bounds Write”…N/A7.0 HighN/ANov 10, 2026
CVE-2026-126136: MFSA2026-129 Thunderbird: Security Vulnerabilities fixed in Thunderbird 153.7N/AN/AN/ANov 10, 2026
CVE-2026-126135: MFSA2026-129 Thunderbird: Security Vulnerabilities fixed in Thunderbird 153.7N/AN/AN/ANov 10, 2026
CVE-2026-126134: MFSA2026-129 Thunderbird: Security Vulnerabilities fixed in Thunderbird 153.7N/AN/AN/ANov 10, 2026
CVE-2026-126133: MFSA2026-129 Thunderbird: Security Vulnerabilities fixed in Thunderbird 153.7N/AN/AN/ANov 10, 2026
CVE-2026-126132: MFSA2026-129 Thunderbird: Security Vulnerabilities fixed in Thunderbird 153.7N/AN/AN/ANov 10, 2026
CVE-2026-126087: AWS: Untrusted search path in the cross-user process launcher in Open Job Description (OpenJD) Sessions for Python before…8.8 High9.4 CriticalN/ANov 10, 2026
CVE-2026-125336: digitalbazaar forge: Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript7.4 HighN/AN/ANov 10, 2026
1201-1225 of 426867