The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
Red Hat: CVE-2026-116154: ImageMagick: ImageMagick: Denial of Service via XML parsing memory leak5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116153: ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations2.5 Low2.0 Low0%Oct 25, 2026
Red Hat: CVE-2026-116152: ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116151: ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder3.7 Low6.3 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116150: ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder3.1 Low2.3 Low0%Oct 25, 2026
Red Hat: CVE-2026-116149: ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images8.1 High7.2 High0%Oct 25, 2026
Red Hat: CVE-2026-116148: ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder3.6 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116147: ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder3.7 Low6.3 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116146: ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116145: ImageMagick: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for…3.9 Low1.8 Low0%Oct 25, 2026
Red Hat: CVE-2026-116144: ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116143: ImageMagick: ImageMagick: Denial of Service via scene selection policy bypass3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116142: ImageMagick: ImageMagick before 7.1.2-33 contains a heap buffer over-read vulnerability that allows attackers to read beyond…3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116141: ImageMagick: ImageMagick: Denial of Service via policy bypass in UHDR decoder5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116140: ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing3.3 Low4.8 Medium0%Oct 25, 2026
CVE-2026-116139: WWBN AVideo: WWBN AVideo 26.0 through 29.3.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 Medium0%Oct 25, 2026
CVE-2026-116053: dbcli mycli: A weakness has been identified in dbcli mycli up to 2.29.4/2.30.15.3 Medium1.9 Low1%Oct 25, 2026
CVE-2026-116052: LinkStackOrg LinkStack: A security flaw has been discovered in LinkStackOrg LinkStack up to 4.8.84.3 Medium5.3 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116137: adm-zip: adm-zip: File integrity check bypass via duplicate archive entries3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116136: ProjectSend: ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link() that allows…5.9 Medium6.0 Medium0%Oct 25, 2026
CVE-2026-116073: leon-ai leon: Leon before commit 50df142 contains a path traversal vulnerability in getModelFileNameFromURL() that allows attackers…6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116072: Docile-Alligator Infinity for Reddit: Infinity for Reddit through 8.3.4 contains a login cross-site request forgery vulnerability that allows attackers to…5.4 Medium5.3 Medium0%Oct 25, 2026
CVE-2026-116071: rotki: rotki before 1.44.2 contains a weak key derivation vulnerability that allows attackers to brute-force backups because…5.9 Medium8.2 High0%Oct 25, 2026
CVE-2026-116070: dqzboy Docker-Proxy: Docker-Proxy through 5.1.9 contains a missing authentication vulnerability in the hubcmdui routes/config.js that allows…6.5 Medium6.9 Medium0%Oct 25, 2026
CVE-2026-116069: Albert-Weasker niubigeo: NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote…6.5 Medium6.9 Medium0%Oct 25, 2026
2126-2150 of 417096