The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-82986: Nextcloud Tables: The user in a group can bypass the group restriction set by an administrator on link sharing, creating share links for…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82984: Nextcloud Server: When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-82983: Nextcloud Tables: The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting…3.3 LowN/AN/AOct 27, 2026
CVE-2026-77173: Nextcloud Files Confidential: A user could create a docx or odt file with a # in the filename with confidential information such as a credit card…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-77172: Nextcloud Server: App passwords were allowed to bypass password confirmation on sensitive endpoints.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-77171: Nextcloud Collectives: A public shared collective always allowed recipients of the link to create pages.3.5 LowN/AN/AOct 27, 2026
CVE-2026-77167: Nextcloud server: Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table7.5 HighN/AN/AOct 27, 2026
CVE-2026-67400: Nextcloud Richdocuments: A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or…3.5 LowN/AN/AOct 27, 2026
CVE-2026-57201: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-57198: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-57197: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.7 HighN/AOct 27, 2026
CVE-2026-57194: asterisk: Asterisk is an open source private branch exchange and telephony toolkit5.9 MediumN/AN/AOct 27, 2026
CVE-2026-57189: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-57185: asterisk: Asterisk is an open source private branch exchange and telephony toolkit6.5 MediumN/AN/AOct 27, 2026
CVE-2026-54462: knative pkg: Knative pkg provides common packages shared across Knative repositories6.5 MediumN/AN/AOct 27, 2026
CVE-2026-48380: Adobe Adobe Substance 3D Painter: Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 27, 2026
CVE-2026-48379: Adobe Adobe Substance 3D Painter: Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 27, 2026
CVE-2026-48360: Adobe: Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could…9.6 CriticalN/AN/AOct 27, 2026
CVE-2026-117514: oretnom23 php-travel-agency-system: A vulnerability was identified in oretnom23 php-travel-agency-system7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-117513: oretnom23 php-travel-agency-system: A vulnerability was determined in oretnom23 php-travel-agency-system7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-117512: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-116675: tinymce: TinyMCE is an open source rich text editorN/A8.5 HighN/AOct 27, 2026
CVE-2026-116674: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116673: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js3.3 LowN/AN/AOct 27, 2026
CVE-2026-116672: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers8.8 HighN/AN/AOct 27, 2026
101-125 of 522616