The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112078: RVC-Project Retrieval-based-Voice-Conversion-WebUI: A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.2607186.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112077: radareorg radare2: A vulnerability was detected in radareorg radare2 6.2.0/6.2.25.6 Medium6.3 MediumN/AOct 19, 2026
CVE-2026-112076: alexta69 MeTube: A security vulnerability has been detected in alexta69 MeTube up to 2026.09.285.6 Medium2.9 LowN/AOct 19, 2026
CVE-2026-112075: unslothai unsloth: A weakness has been identified in unslothai unsloth up to 0.1.501-beta6.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112074: Tencent ncnn: A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b66.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112073: Tencent ncnn: A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b66.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112045: n/a donetick: A vulnerability was detected in donetick up to 0.1.825.4 Medium2.1 LowN/AOct 19, 2026
CVE-2026-111440: openGauss-server openGauss-connector-jdbc: 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中,LogFactory 根据 JDBC 连接参数中的 logger…7.0 HighN/AN/AOct 19, 2026
CVE-2026-112044: dotnet eShop: A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d297.3 High5.5 MediumN/AOct 19, 2026
CVE-2026-112043: calcom: A weakness has been identified in calcom cal.com and cal.diy up to 6.2.06.3 Medium5.3 MediumN/AOct 19, 2026
CVE-2026-112042: diem-project diem: A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad3.5 Low2.0 LowN/AOct 19, 2026
CVE-2026-111441: openGauss-server: 在 openGauss-server 的 src/gausskernel/cbb/utils/hll/hll.cpp 中,内置函数 HllObjectUnpack() 存在长度校验缺陷。该函数从用户提供的 packed HLL 解析…8.1 HighN/AN/AOct 19, 2026
CVE-2026-103091: Google SAM: Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy…N/A9.3 CriticalN/AOct 19, 2026
CVE-2026-102503: Google SAM: Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress…N/A9.3 CriticalN/AOct 19, 2026
CVE-2026-112041: diem-project diem: A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad3.7 Low2.9 LowN/AOct 19, 2026
CVE-2026-112040: diem-project diem: A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad4.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112039: diem-project diem: A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad2.4 Low1.9 LowN/AOct 19, 2026
CVE-2026-112038: diem-project diem: A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad2.4 Low1.9 LowN/AOct 19, 2026
CVE-2026-112037: diem-project diem: A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad3.7 Low2.9 LowN/AOct 19, 2026
CVE-2026-108984: GeoVision Inc. GV-ASManager: A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .7.5 HighN/AN/AOct 19, 2026
CVE-2026-108983: GeoVision Inc. GV-ASManager: A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .9.8 CriticalN/AN/AOct 19, 2026
CVE-2026-112036: Artifex MuPDF: A vulnerability was detected in Artifex MuPDF up to 1.28.54.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112035: aircheng-org iWebShop-5: A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.166.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112034: aircheng-org iWebShop-5: A weakness has been identified in aircheng-org iWebShop-5 up to 5.164.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112033: aircheng-org iWebShop-5: A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.164.3 Medium2.1 LowN/AOct 19, 2026
151-175 of 409174