The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116604: SourceCodester Online Food Ordering System: A vulnerability has been found in SourceCodester Online Food Ordering System 1.06.5 Medium5.5 Medium1%Oct 27, 2026
CVE-2026-116603: SourceCodester Online Food Ordering System: A flaw has been found in SourceCodester Online Food Ordering System 1.04.7 Medium2.0 Low0%Oct 27, 2026
CVE-2026-111422: Apache Software Foundation Apache Airflow SSH provider: In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment`…N/AN/A0%Oct 27, 2026
CVE-2026-76654: Kubernetes: An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a…5.8 MediumN/A0%Oct 26, 2026
CVE-2026-2270: Kubernetes: A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write…5.9 MediumN/A0%Oct 26, 2026
CVE-2026-116602: SourceCodester Online Food Ordering System: A vulnerability was detected in SourceCodester Online Food Ordering System 1.06.5 Medium5.5 Medium0%Oct 26, 2026
CVE-2026-116556: n/a Argilla: A vulnerability was found in Argilla up to 2.8.02.4 Low1.9 Low0%Oct 26, 2026
CVE-2026-116555: n/a Argilla: A vulnerability has been found in Argilla up to 2.8.02.4 Low1.9 Low0%Oct 26, 2026
CVE-2026-116554: n/a Argilla: A flaw has been found in Argilla up to 2.8.03.5 Low2.0 Low0%Oct 26, 2026
CVE-2026-77924: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-66045: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-66044: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-66043: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-66042: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-65686: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-65685: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
CVE-2026-116748: transmission: Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that…8.8 High8.7 High1%Oct 26, 2026
CVE-2026-116747: rajnandan1 kener: Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to…8.1 High9.2 Critical1%Oct 26, 2026
CVE-2026-116746: qloapps: QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview…5.3 Medium6.9 Medium0%Oct 26, 2026
CVE-2026-116745: qloapps: QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that…6.5 Medium6.9 Medium0%Oct 26, 2026
CVE-2026-116744: ntop nDPI: ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that…5.3 Medium6.9 Medium0%Oct 26, 2026
CVE-2026-116743: libyal libmsiecf: libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows…5.5 Medium6.8 Medium0%Oct 26, 2026
CVE-2026-116742: samtools htslib: HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c…4.4 Medium4.8 Medium0%Oct 26, 2026
CVE-2026-116741: xiph speex: Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in…6.5 Medium8.3 High0%Oct 26, 2026
CVE-2026-116740: netsurf-browser libcss: libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote…6.5 Medium7.1 High0%Oct 26, 2026
1426-1450 of 413066