The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118248: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A6.9 MediumN/AOct 28, 2026
CVE-2026-118247: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A6.9 MediumN/AOct 28, 2026
CVE-2026-118246: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.4 HighN/AOct 28, 2026
CVE-2026-118245: highcharts, @highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A8.6 HighN/AOct 28, 2026
CVE-2026-118244: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A7.2 HighN/AOct 28, 2026
CVE-2026-116273: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 28, 2026
CVE-2026-116272: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-116271: Improper Link Resolution Before File AccessN/AN/AN/AOct 28, 2026
CVE-2026-116270: Inefficient Algorithmic ComplexityN/AN/AN/AOct 28, 2026
CVE-2026-118243: highcharts: Highcharts JS is a JavaScript charting library based on SVGN/A5.3 MediumN/AOct 28, 2026
CVE-2026-116269: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-116268: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 28, 2026
CVE-2026-116267: Inefficient Algorithmic ComplexityN/AN/AN/AOct 28, 2026
CVE-2026-116266: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-116265: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-110183: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence4.3 MediumN/AN/AOct 28, 2026
CVE-2026-110182: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer contains a vulnerability related to the anon.partial() and anon.partial_email() functions4.3 MediumN/AN/AOct 28, 2026
CVE-2026-110181: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer contains a vulnerability related to anonymization functions defined using SQL-standard function…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-116264: Interpretation ConflictN/AN/AN/AOct 28, 2026
CVE-2026-105620: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer doesn't mask data returned by a sub-query in a rule6.5 MediumN/AN/AOct 28, 2026
CVE-2026-105619: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer doesn't mask data accessed thru a security_invoker view4.8 MediumN/AN/AOct 28, 2026
CVE-2026-105618: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer's documentation recommends applying rules on partitions and inheritance tables5.7 MediumN/AN/AOct 28, 2026
CVE-2026-105617: DALIBO PostgreSQL Anonymizer: PostgreSQL Anonymizer doesn't invalidate plans prepared after a rule was added or a role changed5.7 MediumN/AN/AOct 28, 2026
CVE-2026-105616: DALIBO PostgreSQL Anonymizer: PostgreSQL restricts acces to the salt and shift via the `SHOW` command for users not member of `pg_read_all_settings`5.7 MediumN/AN/AOct 28, 2026
CVE-2026-105615: DALIBO PostgreSQL Anonymizer: PostgreSQL's optimized statistics on a table are visible as long as you have SELECT privilege on said table3.5 LowN/AN/AOct 28, 2026
101-125 of 413066