The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-106676: n/a: qiujie mall-server 0.0.1-SNAPSHOT contains an integer overflow in CartServiceImpl that allows an authenticated user to…N/AN/AN/AOct 26, 2026
CVE-2013-10077: n/a OctoPrint: A weakness has been identified in OctoPrint 1.0.05.3 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-115915: vllm-project vllm: vLLM is an inference and serving engine for large language models8.1 HighN/AN/AOct 26, 2026
CVE-2026-116385: Bdtask Garage 24 Garage Management Software: A security vulnerability has been detected in Bdtask Garage 24 Garage Management Software 1.03.5 Low2.0 LowN/AOct 26, 2026
CVE-2026-115912: vllm-project vllm: vLLM is an inference and serving engine for large language models7.5 HighN/AN/AOct 26, 2026
CVE-2026-115909: zip-rs zip2: zip is a zip library for Rust that supports reading and writing simple ZIP files7.5 HighN/AN/AOct 26, 2026
CVE-2026-115908: zip-rs zip2: zip is a zip library for Rust that supports reading and writing simple ZIP files7.4 HighN/AN/AOct 26, 2026
CVE-2026-116371: Akuvox Akubela HyPanel PS51: A weakness has been identified in Akuvox Akubela HyPanel PS51 51.130.40.266.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-93846: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the…3.8 LowN/AN/AOct 26, 2026
CVE-2026-85297: Google Cloud Cloud Run MCP: Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to…N/A7.7 HighN/AOct 26, 2026
CVE-2026-65226: Rejected reason: This CVE ID has been rejected by runZero as unused.N/AN/AN/AOct 26, 2026
CVE-2026-65222: Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-lifeN/AN/AN/AOct 26, 2026
CVE-2026-65221: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65218: Rejected reason: The reported issue is tracked under CVE-2026-18451N/AN/AN/AOct 26, 2026
CVE-2026-65217: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65216: Rejected reason: The reported issue is tracked under CVE-2026-18450N/AN/AN/AOct 26, 2026
CVE-2026-65215: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65214: Rejected reason: The reported issue is tracked under CVE-2026-18449N/AN/AN/AOct 26, 2026
CVE-2026-65212: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65203: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65202: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-116544: open5gs: Open5GS 2.6.1 through 2.8.0 contains an out-of-bounds read vulnerability in parse_scheme_output() in lib/sbi/conv.c…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116543: open5gs: Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows…7.5 High8.7 HighN/AOct 26, 2026
CVE-2026-116542: netty: Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116540: netty netty-tcnative: netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in…5.9 Medium8.2 HighN/AOct 26, 2026
101-125 of 416032