The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-86921: Apple: A permissions issue was addressed with improved validationN/AN/AN/AOct 20, 2026
CVE-2026-86919: Apple: A stack overflow was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-86915: Apple macOS: A race condition was addressed with improved lockingN/AN/AN/AOct 20, 2026
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory managementN/AN/AN/AOct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checksN/AN/AN/AOct 20, 2026
CVE-2026-86875: Apple Xcode: An input validation issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86874: Apple Xcode: An out-of-bounds read was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86872: Apple: A logic issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86868: Apple macOS: An authentication issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-84582: Apple: A privacy issue was addressed with improved access restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-84579: Apple macOS: A logic issue was addressed with improved checksN/AN/AN/AOct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's accessN/AN/AN/AOct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-77938: letta-ai letta: Letta through 0.16.8 contains an information disclosure vulnerability that allows users running tools to read server…6.5 Medium7.1 HighN/AOct 20, 2026
CVE-2026-77937: letta-ai letta: Letta through 0.16.8 contains an authentication bypass vulnerability that allows API callers to impersonate other users…8.1 High8.6 HighN/AOct 20, 2026
CVE-2026-77936: letta-ai letta: Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-77935: coze-dev coze-studio: Coze Studio through 0.5.1 contains an insecure direct object reference vulnerability in workflow.go that allows…8.3 High8.7 HighN/AOct 20, 2026
CVE-2026-77934: coze-dev coze-studio: Coze Studio before 0.5.0 contains an insecure default configuration that allows any registered user to execute commands…8.8 High8.7 HighN/AOct 20, 2026
CVE-2026-77933: eosphoros-ai DB-GPT: DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-77932: eosphoros-ai DB-GPT: DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the…9.8 Critical9.3 CriticalN/AOct 20, 2026
101-125 of 407346
‹›