The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118617: Ultralytics: Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118616: Ultralytics: Ultralytics parse_model Code Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118615: Ultralytics: Ultralytics torch_safe_load Command Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118614: Ultralytics: Ultralytics check_det_dataset Code Injection Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118613: Ultralytics: Ultralytics torch_load Deserialization of Untrusted Data Remote Code Execution Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118611: Alpine iLX-F511: Alpine iLX-F511 Bluetooth OBEX Packet Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118610: Alpine iLX-F511: Alpine iLX-F511 Android Auto Service Stack-based Buffer Overflow Remote Code Execution Vulnerability8.8 HighN/AN/AOct 28, 2026
CVE-2026-118609: Alpine iLX-F511: Alpine iLX-F511 Android Auto Connection Handler Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118608: Alpine iLX-F511: Alpine iLX-F511 libanwbtstack.so prh_rfcomm_cc_process_test Out-Of-Bounds Read Information Disclosure Vulnerability3.5 LowN/AN/AOct 28, 2026
CVE-2026-118607: Alpine iLX-F511: Alpine iLX-F511 diagapp Command Injection Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118606: Alpine iLX-F511: Alpine iLX-F511 Framework Service Exposed Dangerous Function Remote Code Execution Vulnerability8.8 HighN/AN/AOct 28, 2026
CVE-2026-118605: Alpine iLX-F511: Alpine iLX-F511 prh_sdp_service_search_decode Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 HighN/AN/AOct 28, 2026
CVE-2026-118604: Alpine iLX-F511: Alpine iLX-F511 Framework Service Stack-based Buffer Overflow Remote Code Execution Vulnerability6.8 MediumN/AN/AOct 28, 2026
CVE-2026-118603: Alpine iLX-F511: Alpine iLX-F511 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability8.0 HighN/AN/AOct 28, 2026
CVE-2026-118602: Alpine iLX-F511: Alpine iLX-F511 Fiv.System Exposed Dangerous Method Local Privilege Escalation Vulnerability7.8 HighN/AN/AOct 28, 2026
CVE-2026-118601: Alpine iLX-F511: Alpine iLX-F511 SSH Hard-Coded Credentials Remote Code Execution Vulnerability6.3 MediumN/AN/AOct 28, 2026
CVE-2026-118581: MongoDB Java Driver: A BSON encoding component of the MongoDB Java Driver does not verify that an externally supplied raw document's…6.5 Medium6.9 MediumN/AOct 28, 2026
CVE-2026-118510: MongoDB Laravel MongoDB: A type-handling flaw in the relationship query building of this MongoDB integration library can cause a check for the…8.8 High7.7 HighN/AOct 28, 2026
CVE-2026-117626: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the…N/AN/AN/AOct 28, 2026
CVE-2026-117625: Jenkins Project Jenkins: A missing permission check in Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read…N/AN/AN/AOct 28, 2026
CVE-2026-117624: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not consistently enforce the restriction on deserializing…N/AN/AN/AOct 28, 2026
CVE-2026-117623: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier does not escape the text shown in the tooltips of breadcrumb bar…N/AN/AN/AOct 28, 2026
CVE-2026-117622: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows agents to send exceptions implementing the Stapler…N/AN/AN/AOct 28, 2026
CVE-2026-117621: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier computes on the agent the URL of the link shown in the workspace…N/AN/AN/AOct 28, 2026
CVE-2026-117620: Jenkins Project Jenkins: Jenkins 2.587 and earlier, LTS 2.580.1 and earlier allows attackers with Overall/Read permission to trigger warnings in…N/AN/AN/AOct 28, 2026
126-150 of 413066