The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115480: baserproject basercms: baserCMS is a website development framework5.3 MediumN/AN/AOct 23, 2026
CVE-2026-115479: baserproject basercms: baserCMS is a website development framework5.3 MediumN/AN/AOct 23, 2026
CVE-2026-115457: baserproject basercms: baserCMS is a website development framework7.1 HighN/AN/AOct 23, 2026
CVE-2026-114624: baserproject basercms: baserCMS is a website development framework7.2 HighN/AN/AOct 23, 2026
CVE-2026-114623: baserproject basercms: baserCMS is a website development framework6.5 MediumN/AN/AOct 23, 2026
CVE-2026-114622: baserproject basercms: baserCMS is a website development framework7.2 HighN/AN/AOct 23, 2026
CVE-2026-114621: baserproject basercms: baserCMS is a website development framework8.8 HighN/AN/AOct 23, 2026
CVE-2026-114357: DJI CrystalSky ZS600C: Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C…N/A9.3 CriticalN/AOct 23, 2026
CVE-2026-114356: DJI CrystalSky ZS600C: Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7…N/A7.0 HighN/AOct 23, 2026
CVE-2026-114355: DJI CrystalSky ZS600C: OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7…N/A8.6 HighN/AOct 23, 2026
CVE-2026-114354: DJI CrystalSky ZS600C: Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky…N/A8.6 HighN/AOct 23, 2026
CVE-2026-114353: DJI CrystalSky ZS600C: Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C…N/A7.0 HighN/AOct 23, 2026
CVE-2026-10632: Zimbra Zimbra Collaboration Suite: A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an…8.7 HighN/AN/AOct 23, 2026
CVE-2026-99087: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the…N/AN/AN/AOct 23, 2026
CVE-2026-99086: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume…N/AN/AN/AOct 23, 2026
CVE-2026-99085: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's…N/AN/AN/AOct 23, 2026
CVE-2026-99084: Linux: In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable…N/AN/AN/AOct 23, 2026
CVE-2026-99083: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in…N/AN/AN/AOct 23, 2026
CVE-2026-99082: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO…N/AN/AN/AOct 23, 2026
CVE-2026-99081: Linux: In the Linux kernel, the following vulnerability has been resolved: bnxt_en: fix DMA mapping length for padded small…N/AN/AN/AOct 23, 2026
CVE-2026-99080: Linux: In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode()…N/AN/AN/AOct 23, 2026
CVE-2026-99079: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…N/AN/AN/AOct 23, 2026
CVE-2026-99078: Linux: In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent stale XSK buffer release on…N/AN/AN/AOct 23, 2026
CVE-2026-99077: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv4: udp: Create exceptions before socket matching…N/AN/AN/AOct 23, 2026
CVE-2026-99076: Linux: In the Linux kernel, the following vulnerability has been resolved: ipv6: udp: Create exceptions before socket matching…N/AN/AN/AOct 23, 2026
101-125 of 413321