The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-28854: Apple macOS: The issue was addressed with additional app bundle integrity checksN/AN/AN/AOct 20, 2026
CVE-2026-28853: Apple macOS: The issue was addressed with improved checks7.8 HighN/AN/AOct 20, 2026
CVE-2026-109444: Tracer-Cloud opensre: OpenSRE through 0.1.2026.10.19 contains an approval gate bypass vulnerability that allows attackers to execute…8.8 High8.7 HighN/AOct 20, 2026
CVE-2026-109442: cas-bigdatalab piflow: piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-109440: ginlix-ai LangAlpha: LangAlpha through 2026.09.07 contains an indirect prompt injection vulnerability that allows remote attackers to…8.1 High8.6 HighN/AOct 20, 2026
CVE-2026-105298: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.9.0, Pingora accepted HTTP/2 requests whose Host header differed from the :authority…N/A6.3 MediumN/AOct 20, 2026
CVE-2026-105297: Cloudflare https://github.com/cloudflare/pingora: Summary Before version 0.8.1, Pingora's HTTP/2 server used the h2 crate's default limits unless the application set its…7.5 HighN/AN/AOct 20, 2026
CVE-2026-86961: Apple: A race condition was addressed with additional validationN/AN/AN/AOct 20, 2026
CVE-2026-86949: Apple Xcode: This issue was addressed by enforcing library validation on the affected binariesN/AN/AN/AOct 20, 2026
CVE-2026-86933: Apple macOS: A permissions issue was addressed with additional sandbox restrictionsN/AN/AN/AOct 20, 2026
CVE-2026-86919: Apple: A stack overflow was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86918: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-86915: Apple macOS: A race condition was addressed with improved lockingN/AN/AN/AOct 20, 2026
CVE-2026-86914: Apple macOS: An information disclosure issue was addressed with improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-86913: Apple: A use after free issue was addressed with improved memory managementN/AN/AN/AOct 20, 2026
CVE-2026-86907: Apple macOS: An authorization issue was addressed with improved entitlement checksN/AN/AN/AOct 20, 2026
CVE-2026-86875: Apple Xcode: An input validation issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86874: Apple Xcode: An out-of-bounds read was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-86871: Apple macOS: An integer underflow was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-84613: Apple: An out-of-bounds write issue was addressed with improved bounds checkingN/AN/AN/AOct 20, 2026
CVE-2026-84547: Apple macOS: A memory corruption issue was addressed with improved input validationN/AN/AN/AOct 20, 2026
CVE-2026-84508: Apple: This issue was addressed with improved validation of the caller's accessN/AN/AN/AOct 20, 2026
CVE-2026-84490: Apple iOS and iPadOS: This issue was addressed through improved state managementN/AN/AN/AOct 20, 2026
CVE-2026-65396: Apple macOS: A buffer overflow was addressed with improved size validationN/AN/AN/AOct 20, 2026
CVE-2026-65379: Apple macOS: The issue was addressed with improved handling of secure input stateN/AN/AN/AOct 20, 2026
201-225 of 407346
‹›