The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-36698: n/a: Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection…N/AN/AN/AOct 26, 2026
CVE-2026-31158: n/a: SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute…N/AN/AN/AOct 26, 2026
CVE-2026-116497: Red Hat: A NULL pointer dereference vulnerability was found in gssproxy5.5 MediumN/AN/AOct 26, 2026
CVE-2026-116340: iFlytek astron-agent: A vulnerability was identified in iFlytek astron-agent up to 1.1.24.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116339: iFlytek astron-agent: A vulnerability was determined in iFlytek astron-agent up to 1.1.27.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-116284: n/a Kameleo: A security vulnerability has been detected in Kameleo up to 5.3.14.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-115930: MongoDB, Inc. mongosh: The MongoDB Shell (mongosh) relies on Node.js as a third-party runtime that carries its own TLS root certificate store6.8 Medium7.6 HighN/AOct 26, 2026
CVE-2026-112345: Sciener TTLock: TTLock Android application before v9.8.260718 and associated smart-lock firmware contain a hardcoded static AES key…8.1 High8.6 HighN/AOct 26, 2026
CVE-2026-110748: Apache Software Foundation Apache SIS: This issue affects Apache SIS from version 0.7 through 1.6 inclusiveN/AN/AN/AOct 26, 2026
CVE-2026-110733: Apache Software Foundation Apache SIS: Vulnerability in the SQL storage module of Apache SIS5.4 MediumN/AN/AOct 26, 2026
CVE-2026-106781: n/a: An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker…N/AN/AN/AOct 26, 2026
CVE-2026-116541: netty: Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-97200: benoitc hackney: Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackney allows a…N/A8.2 HighN/AOct 26, 2026
CVE-2026-59107: WolfVision: A security vulnerability has been identified in the vSolution Matrix file sharing feature9.8 Critical9.2 CriticalN/AOct 26, 2026
CVE-2026-59106: WolfVision: A security vulnerability has been identified in the WolfProt interface implementation9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-116516: Mattermost: Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-116492: frappe crm: Frappe CRM app before 1.89.1 contains a missing authorization vulnerability that allows authenticated low-privileged…6.5 Medium7.1 HighN/AOct 26, 2026
CVE-2026-116488: NXP mcuxsdk-middleware-usb: NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio,…6.8 Medium7.0 HighN/AOct 26, 2026
CVE-2026-116487: NXP mcuxsdk-middleware-usb: NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability…4.6 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-116486: easymock objenesis: Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects…4.5 Medium2.0 LowN/AOct 26, 2026
CVE-2026-116485: huangxd- danmu_api: danmu_api before 1.21.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to modify…9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-116283: n/a Kameleo: A weakness has been identified in Kameleo up to 5.0.1.264.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116282: n/a Kameleo: A security flaw has been discovered in Kameleo up to 5.3.14.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116281: n/a Kameleo: A vulnerability was identified in Kameleo up to 5.0.1.263.3 Low4.8 MediumN/AOct 26, 2026
CVE-2026-116280: n/a Kameleo: A vulnerability was determined in Kameleo up to 5.0.1.265.5 Medium5.1 MediumN/AOct 26, 2026
176-200 of 416032