The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116167: siyuan-note siyuan: SiYuan from 2.9.0 before 3.8.7 contains a cross-site scripting vulnerability in the unauthenticated /check-auth page…6.8 Medium7.6 High0%Oct 25, 2026
CVE-2026-116166: siyuan-note siyuan: SiYuan 3.6.0 before 3.8.7 accepts and persists the networkServeTLS setting but never enforces it, so the kernel port…6.8 Medium7.6 High0%Oct 25, 2026
CVE-2026-116165: parse-community parse-server: Parse Server before 8.6.101 and 9.0.0 before 9.10.4-alpha.4 contains a missing authorization vulnerability on MongoDB…N/A8.8 High0%Oct 25, 2026
CVE-2026-116164: parse-community parse-server: Parse Server before 8.6.100 and 9.0.0 before 9.10.4-alpha.3 does not reject reserved internal field names in client…N/A6.3 Medium0%Oct 25, 2026
CVE-2026-116163: parse-community parse-server: Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication bypass because the…7.4 High9.1 Critical0%Oct 25, 2026
CVE-2026-116162: parse-community parse-server: Parse Server before 8.6.104 and 9.0.0 before 9.10.5-alpha.5 saves the entire login request with master privileges when…N/A2.1 Low0%Oct 25, 2026
CVE-2026-116161: parse-community parse-server: Parse Server before 8.6.103 and 9.0.0 before 9.10.5-alpha.4 contains an information disclosure vulnerability in…N/A6.0 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116160: ImageMagick: ImageMagick: Denial of Service via crafted image in X11 animate operation3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116159: ImageMagick: ImageMagick: Denial of Service via memory leak in the -cdl option3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116158: ImageMagick: ImageMagick: Denial of Service via memory leak in compare command2.5 Low2.0 Low0%Oct 25, 2026
Red Hat: CVE-2026-116157: ImageMagick: ImageMagick: Denial of Service via memory leak in PerlMagick3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116156: ImageMagick: ImageMagick: Denial of Service via memory leak in -set profile option3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116155: ImageMagick: ImageMagick: Denial of Service via crafted XMP profile memory leak5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116154: ImageMagick: ImageMagick: Denial of Service via XML parsing memory leak5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116153: ImageMagick: ImageMagick: Denial of Service via heap-based buffer overflow in convex-hull calculations2.5 Low2.0 Low0%Oct 25, 2026
Red Hat: CVE-2026-116152: ImageMagick: ImageMagick: Denial of Service via memory leak in MAT decoder5.3 Medium6.9 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116151: ImageMagick: ImageMagick: Denial of Service via memory leak in JNG encoder3.7 Low6.3 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116150: ImageMagick: ImageMagick: Denial of Service via memory leak in FPX encoder3.1 Low2.3 Low0%Oct 25, 2026
Red Hat: CVE-2026-116149: ImageMagick: ImageMagick: Memory corruption via crafted bzip2 compressed images8.1 High7.2 High0%Oct 25, 2026
Red Hat: CVE-2026-116148: ImageMagick: ImageMagick: Command injection via unvalidated drawing options in MVG encoder3.6 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116147: ImageMagick: ImageMagick: Denial of service via unchecked memory allocation in DJVU decoder3.7 Low6.3 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116146: ImageMagick: ImageMagick: Denial of Service via MSL decoder memory leak3.7 Low6.3 Medium0%Oct 25, 2026
CVE-2026-116145: ImageMagick: ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 contains a security policy bypass caused by an incomplete fix for…3.9 Low1.8 Low0%Oct 25, 2026
Red Hat: CVE-2026-116144: ImageMagick: ImageMagick: Denial of Service via uncontrolled recursion in MVG decoder3.3 Low4.8 Medium0%Oct 25, 2026
Red Hat: CVE-2026-116143: ImageMagick: ImageMagick: Denial of Service via scene selection policy bypass3.3 Low4.8 Medium0%Oct 25, 2026
2226-2250 of 413066