The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112943: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112942: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A7.5 HighN/AOct 20, 2026
CVE-2026-112941: tox-dev filelock: filelock is a platform-independent file lock for Python3.3 LowN/AN/AOct 20, 2026
CVE-2026-112940: tox-dev filelock: filelock is a platform-independent file lock for Python7.1 HighN/AN/AOct 20, 2026
CVE-2026-112939: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112937: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112936: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112935: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112934: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112915: tox-dev filelock: filelock is a platform-independent file lock for Python5.5 MediumN/AN/AOct 20, 2026
CVE-2026-112914: tox-dev filelock: filelock is a platform-independent file lock for Python5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112912: tox-dev filelock: filelock is a platform-independent file lock for Python2.5 LowN/AN/AOct 20, 2026
CVE-2026-112911: tox-dev filelock: filelock is a platform-independent file lock for Python6.3 MediumN/AN/AOct 20, 2026
CVE-2026-112909: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112906: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112834: Castos Seriously Simple Podcasting: Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112833: Castos Seriously Simple Podcasting: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-111762: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) ProtocolN/A5.7 MediumN/AOct 20, 2026
CVE-2026-111761: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol5.8 MediumN/AN/AOct 20, 2026
CVE-2026-96582: Eclipse Foundation Eclipse ThreadX - USBX: A HID report descriptor is a sequence of items, each declaring in its header how many data bytes follow4.9 MediumN/AN/AOct 20, 2026
CVE-2026-96406: Eclipse Foundation Eclipse ThreadX - USBX: A VideoStreaming interface reports the size of its whole class-specific descriptor block in the `wTotalLength` field of…4.9 MediumN/AN/AOct 20, 2026
CVE-2026-93446: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat could cause TLS 1.3 connections to fail intermittentlyN/AN/AN/AOct 20, 2026
CVE-2026-91041: Eclipse Foundation Eclipse ThreadX - FileX: Mounting an attacker-controlled FAT image with fault tolerance enabled causes an out-of-bounds heap write during log…7.8 HighN/AN/AOct 20, 2026
CVE-2026-88041: Apache Software Foundation Apache Tomcat: Incomplete cleanup vulnerability in Apache Tomcat allowed an trailer information from a previous request to leak into a…N/AN/AN/AOct 20, 2026
CVE-2026-80353: Apache Software Foundation Apache Tomcat: Time-of-check time-of-use (TOCTOU) race condition vulnerability in Apache Tomcat when creating unix domain sockets for…N/AN/AN/AOct 20, 2026
1701-1725 of 407346