The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116531: Improper Handling of Length Parameter InconsistencyN/AN/AN/AOct 28, 2026
CVE-2026-116285: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 28, 2026
CVE-2026-93522: x.org: A heap buffer overflow caused by mismatched size usage in CopyArea CPU-to-FBO path in X.Org X Server before 21.1.15 and…7.8 HighN/AN/AOct 28, 2026
CVE-2026-93521: x.org: A buffer overflow in RandR ChangeProviderProperty requests in X.Org X Server before 2.1.25 and XWayland before 24.4.14…7.8 HighN/AN/AOct 28, 2026
CVE-2026-67187: Saturday Drive Ninja Forms: Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows…7.1 High5.1 MediumN/AOct 28, 2026
CVE-2026-59979: YosemiteCrew Yosemite-Crew: YosemiteCrew provides organization-based service and task management8.3 HighN/AN/AOct 28, 2026
CVE-2026-56828: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel8.8 HighN/AN/AOct 28, 2026
CVE-2026-50543: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software4.3 MediumN/AN/AOct 28, 2026
CVE-2026-50542: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software5.4 MediumN/AN/AOct 28, 2026
CVE-2026-50539: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software6.5 MediumN/AN/AOct 28, 2026
CVE-2026-47235: simulationcraft simc: SimulationCraft is a tool to explore combat mechanics in World of WarcraftN/A7.5 HighN/AOct 28, 2026
CVE-2026-44179: xwikisas xwiki-pro-macros: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence9.9 CriticalN/AN/AOct 28, 2026
CVE-2026-118029: aws aws-sdk-pandas: Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler)…5.9 Medium5.9 MediumN/AOct 28, 2026
CVE-2026-116778: fogproject: FOG is a free open-source cloning/imaging/rescue suite/inventory management system8.8 HighN/AN/AOct 28, 2026
CVE-2026-116776: n-romanovich usb-test: USB Test is a lightweight Windows CLI utility for verifying sector integrity and detecting overreported capacity on USB…N/A7.0 HighN/AOct 28, 2026
CVE-2026-112357: GFI USA, LLC GFI KerioConnect: GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local…7.8 High8.5 HighN/AOct 28, 2026
CVE-2026-112356: GFI USA, LLC GFI KerioConnect: GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail…6.1 Medium5.1 MediumN/AOct 28, 2026
CVE-2026-93520: x.org: A heap buffer overflow caused by mismatching size calculations between XkbAllocNames and ChangeKeycodeRange in X.org X…7.8 HighN/AN/AOct 28, 2026
CVE-2026-93519: x.org, x.orgg: A buffer overflow when handling pointer barriers in the XFIXES extension in X.Org X server before 21.1.25 and XWayland…7.8 HighN/AN/AOct 28, 2026
CVE-2026-93518: x.org: An integer truncation issue in XkbResizeKeyType() that could lead to a heap buffer overflow by authenticated X clients…7.8 HighN/AN/AOct 28, 2026
CVE-2026-115402: OpenVPN ovpn-dco-win: OpenVPN ovpn-dco-win 0.6.5 through 2.8.13 allows unprivileged local users to cause a denial of service (system crash)…N/A5.7 MediumN/AOct 28, 2026
CVE-2026-106972: n/a: An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows…N/AN/AN/AOct 28, 2026
CVE-2026-106971: n/a: An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows attackers to cause a…N/AN/AN/AOct 28, 2026
CVE-2026-93517: x.orgg, x.org: A heap buffer overflow in handling GLX RenderLarge request where dataBytes exceeds cmdlen in X.org X server before…N/A8.5 HighN/AOct 28, 2026
CVE-2026-59959: HappySeaFox sail: SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profilesN/A4.8 MediumN/AOct 28, 2026
176-200 of 413066