The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-50571: w3c websub: WebSub is a W3C recommendation produced by the Social Web Working Group5.7 MediumN/AN/AOct 27, 2026
CVE-2026-59158: thoda-dev nuxt-ollama: Nuxt Ollama integrates the official Ollama JavaScript library into Nuxt applications7.5 HighN/AN/AOct 27, 2026
CVE-2026-58257: JeromeDevome GRR: GRR is a resource management and reservation application7.2 HighN/AN/AOct 27, 2026
CVE-2026-58256: JeromeDevome GRR: GRR is a resource management and reservation application9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-58255: jhuckaby Cronicle: Cronicle is a multi-server task scheduler and runner, with a web based front-end UI8.8 HighN/AN/AOct 27, 2026
CVE-2026-58205: JeromeDevome GRR: GRR is a resource management and reservation application8.1 HighN/AN/AOct 27, 2026
CVE-2026-22063: NetApp: The private keys of eight eMudhra intermediate CA certificates have been compromisedN/A6.0 MediumN/AOct 27, 2026
CVE-2026-97045: golang.org/x/net golang.org/x/net/html: In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML…N/AN/AN/AOct 27, 2026
CVE-2026-58496: thorvg: Thor Vector Graphics (ThorVG) is a production-ready vector graphics engine4.3 MediumN/AN/AOct 27, 2026
CVE-2026-78661: golang.org/x/net golang.org/x/net/html: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string…N/AN/AN/AOct 27, 2026
CVE-2026-62765: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…7.5 HighN/AN/AOct 27, 2026
CVE-2026-57203: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.9 MediumN/AOct 27, 2026
CVE-2026-57199: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-57192: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A6.0 MediumN/AOct 27, 2026
CVE-2026-57191: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A8.2 HighN/AOct 27, 2026
CVE-2026-57190: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.0 HighN/AOct 27, 2026
CVE-2026-57186: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-118128: a2aproject a2a-js: A vulnerability has been found in a2aproject a2a-js up to 1.1.06.5 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-85898: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…8.8 HighN/AN/AOct 27, 2026
CVE-2026-83831: Microsoft Microsoft Edge (Chromium-based): Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 27, 2026
CVE-2026-57200: asterisk, certified-asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-57195: asterisk: Asterisk is an open source private branch exchange and telephony toolkit7.5 HighN/AN/AOct 27, 2026
CVE-2026-39928: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 27, 2026
CVE-2026-116775: Eugeny russh: pageant provides a PageantStream type that implements AsyncRead and AsyncWrite traits and can be used to communicate…N/A2.3 LowN/AOct 27, 2026
CVE-2026-116774: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation4.3 MediumN/AN/AOct 27, 2026
1-25 of 522616
›