The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111853: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.18.8 HighN/A1%Oct 17, 2026
CVE-2026-111823: Mage mage-ai: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.9.8 CriticalN/A0%Oct 17, 2026
Red Hat: CVE-2026-89096: nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd5.9 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89088: Important priority package update for parted5.5 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89085: Important priority package update for parted6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-17591: libarchive: libarchive: use-after-free via aliased Mac metadata copy3.6 LowN/A0%Oct 16, 2026
Red Hat: CVE-2026-111802: nautilus: nautilus: Arbitrary File Deletion via Trash Symlink6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-110759: perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110758: perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace strippingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110757: perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110756: perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequencesN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110755: perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endingsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110754: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110753: perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110752: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorN/AN/A0%Oct 16, 2026
CVE-2026-107346: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 16, 2026
CVE-2026-106549: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 16, 2026
CVE-2026-96628: getarcaneapp arcane: Arcane is an interface for managing Docker containers, images, networks, and volumes4.3 MediumN/A0%Oct 16, 2026
CVE-2026-96627: getarcaneapp arcane: Arcane is an interface for managing Docker containers, images, networks, and volumes8.8 HighN/A0%Oct 16, 2026
CVE-2026-96626: Exposure of Sensitive Information8.5 HighN/A0%Oct 16, 2026
FreeBSD: VID-0cb42b4a-9f19-11f1-a655-3497f65b111b (CVE-2026-68498): jackson-core -- StreamReadConstraints can be bypassed7.5 HighN/A1%Oct 16, 2026
Red Hat: CVE-2026-62439: gimp: gimp: file-pvr Plug-in PVR File Parsing Integer Overflow Heap-based Buffer Overflow Vulnerability7.0 HighN/A0%Oct 16, 2026
Red Hat: CVE-2026-62438: gimp: gimp: PAA integer overflow out-of-bounds read6.1 MediumN/A0%Oct 16, 2026
CVE-2026-49410: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.1 HighN/A0%Oct 16, 2026
CVE-2026-111044: Sunshine is a self-hosted game stream host for Moonlight7.6 HighN/A0%Oct 16, 2026
1376-1400 of 407346
‹›