The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107090: n/a: An issue in Maltego Technologies GmbH Maltego Windows Installer 4.13.0 allows a local attacker to execute arbitrary…N/AN/AN/AOct 26, 2026
CVE-2026-107080: n/a: OpenJPEG 2.4.0 through 2.5.4, and git master through commit 8314119b, contains an out-of-bounds read and write in…N/AN/AN/AOct 26, 2026
CVE-2026-82390: zephyrproject zephyr: The Espressif AES driver drivers/crypto/crypto_esp32_aes.c advertises a multi-session cipher API — it hands out up to…3.7 LowN/AN/AOct 26, 2026
CVE-2026-82389: zephyrproject zephyr: In the Bluetooth Classic Hands-Free Profile Audio Gateway role, hfp_ag_create() in…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82388: zephyrproject zephyr: bt_hfp_hf_connect() in subsys/bluetooth/host/classic/hfp_hf.c allocates the per-connection HFP Hands-Free object with…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-19742: zephyrproject zephyr: The IPv6 stack derived the long-lived secret key used to compute RFC 7217 stable interface identifiers…3.7 LowN/AN/AOct 26, 2026
CVE-2026-81038: zephyrproject zephyr: The Object Transfer Service server builds its Object Action Control Point (OACP) response indication in oacp_ind_send()…7.1 HighN/AN/AOct 26, 2026
CVE-2026-81039: zephyrproject zephyr: The Bluetooth host pre-allocates a bt_conn object (a "reservation") from the fixed acl_conns[] pool for every…4.3 MediumN/AN/AOct 26, 2026
CVE-2026-116394: Magepeople inc. WpEvently: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Magepeople inc5.3 MediumN/AN/AOct 26, 2026
CVE-2026-99099: Linux: In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Fix AMD TLBI Erratum #1718 The…N/AN/AN/AOct 26, 2026
CVE-2026-99098: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow in inline mode…N/AN/AN/AOct 26, 2026
CVE-2026-99097: Linux: In the Linux kernel, the following vulnerability has been resolved: tee: shm: reject zero-sized allocations in…N/AN/AN/AOct 26, 2026
CVE-2026-99096: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/register: don't exempt disabled rings from…N/AN/AN/AOct 26, 2026
CVE-2026-99095: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/vc4: drain the hangcheck timer and works on V3D…N/AN/AN/AOct 26, 2026
CVE-2026-99094: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel_pcie: fix TX descriptor bounds…N/AN/AN/AOct 26, 2026
CVE-2026-99093: Linux: In the Linux kernel, the following vulnerability has been resolved: mm: don't schedule deferred kernel page table…N/AN/AN/AOct 26, 2026
CVE-2026-99092: Linux: In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem…N/AN/AN/AOct 26, 2026
CVE-2026-99091: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix status of pending commands…N/AN/AN/AOct 26, 2026
CVE-2026-99090: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: serialize vblank counter reads against…N/AN/AN/AOct 26, 2026
CVE-2026-99089: Linux: In the Linux kernel, the following vulnerability has been resolved: ASoC: samsung: i2s: enable op_clk in probe to…N/AN/AN/AOct 26, 2026
CVE-2026-99088: Linux: In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header…N/AN/AN/AOct 26, 2026
CVE-2026-94386: Apache Software Foundation Apache Camel: Use of Cache Containing Sensitive Information vulnerability in Apache Camel Oauth component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-93850: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 fail to bind the volume…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-93849: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10.x <= 11.10.1 Mattermost fail to apply…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-93848: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to apply outbound internal-connection filtering to the OpenID discovery…2.7 LowN/AN/AOct 26, 2026
101-125 of 546512