The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-91189: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX binary resource loader never checks that a font page's glyph range is well formedN/A7.1 HighN/AOct 20, 2026
CVE-2026-91186: Eclipse Foundation Eclipse ThreadX - GUIX: The PNG chunk reader has no notion of chunk orderingN/A8.4 HighN/AOct 20, 2026
CVE-2026-91059: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX JPEG software decoder enforces no ordering on JPEG markersN/A6.8 MediumN/AOct 20, 2026
CVE-2026-113466: n/a MinIO: A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z5.3 Medium5.5 MediumN/AOct 20, 2026
CVE-2026-113411: Nerimity Desktop: A vulnerability was found in Nerimity Desktop up to 2.2.26.3 Medium2.1 LowN/AOct 20, 2026
CVE-2026-113397: DrayTek Vigor2960: A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 LowN/AOct 20, 2026
CVE-2026-112944: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112943: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112942: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A7.5 HighN/AOct 20, 2026
CVE-2026-112941: tox-dev filelock: filelock is a platform-independent file lock for Python3.3 LowN/AN/AOct 20, 2026
CVE-2026-112940: tox-dev filelock: filelock is a platform-independent file lock for Python7.1 HighN/AN/AOct 20, 2026
CVE-2026-112939: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112937: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112936: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112935: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112934: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112915: tox-dev filelock: filelock is a platform-independent file lock for Python5.5 MediumN/AN/AOct 20, 2026
CVE-2026-112914: tox-dev filelock: filelock is a platform-independent file lock for Python5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112912: tox-dev filelock: filelock is a platform-independent file lock for Python2.5 LowN/AN/AOct 20, 2026
CVE-2026-112911: tox-dev filelock: filelock is a platform-independent file lock for Python6.3 MediumN/AN/AOct 20, 2026
CVE-2026-112909: tox-dev filelock: filelock is a platform-independent file lock for Python6.1 MediumN/AN/AOct 20, 2026
CVE-2026-112906: tox-dev filelock: filelock is a platform-independent file lock for Python4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112834: Castos Seriously Simple Podcasting: Missing Authorization vulnerability in Castos Seriously Simple Podcasting seriously-simple-podcasting allows Exploiting…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112833: Castos Seriously Simple Podcasting: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Castos Seriously…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-111762: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) ProtocolN/A5.7 MediumN/AOct 20, 2026
151-175 of 407346