The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107672: Autodesk Fusion Post Processor Utility: A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post…8.8 HighN/AN/AOct 27, 2026
CVE-2026-117511: desmondmorris node-tesseract: A vulnerability has been found in desmondmorris node-tesseract up to 0.2.77.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-116863: Tribulant Software Newsletters: Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Software Newsletters newsletters-lite allows Cross Site…9.6 CriticalN/AN/AOct 27, 2026
CVE-2026-115495: WatchGuard Mobile VPN with SSL Client: Cleartext Transmission of Sensitive Information vulnerability in the WatchGuard Mobile VPN with SSL client for Windows…N/A5.7 MediumN/AOct 27, 2026
CVE-2026-90465: WatchGuard Fireware OS: A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A8.7 HighN/AOct 27, 2026
CVE-2026-93862: WatchGuard Fireware OS: An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A7.2 HighN/AOct 27, 2026
CVE-2026-112709: WatchGuard Fireware OS: A heap-based buffer overflow vulnerability in the Fireware OS authentication service allows an attacker who controls or…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-90464: WatchGuard Fireware OS: An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,…N/A7.2 HighN/AOct 27, 2026
CVE-2026-103593: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who…N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-113881: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's VPN Network Access Enforcement process allows an…N/A6.1 MediumN/AOct 27, 2026
CVE-2026-93434: WatchGuard Fireware OS: An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote,…N/A8.7 HighN/AOct 27, 2026
CVE-2026-90442: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with…N/A8.6 HighN/AOct 27, 2026
CVE-2026-112710: WatchGuard Fireware OS: A heap-based buffer overflow vulnerability exists in the Fireware OS authentication service allows an attacker who…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-82332: WatchGuard Fireware OS: An improper authentication vulnerability in WatchGuard Fireware OS's AuthPoint multi-factor authentication process…N/A5.6 MediumN/AOct 27, 2026
CVE-2026-93857: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93866: WatchGuard Fireware OS: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: WatchGuard Fireware OS: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution…N/A7.1 HighN/AOct 27, 2026
CVE-2026-103594: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote…N/A9.5 CriticalN/AOct 27, 2026
CVE-2026-104381: WatchGuard Fireware OS: A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an…N/A6.0 MediumN/AOct 27, 2026
CVE-2026-111107: WatchGuard Fireware OS: A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote,…N/A8.7 HighN/AOct 27, 2026
CVE-2026-93865: WatchGuard Fireware OS: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-109823: tidewave-ai tidewave: An attacker can read the name of filesystem paths of your application present via Tidewave configuration via…N/A2.3 LowN/AOct 27, 2026
CVE-2026-117510: Dexmal Dexbotic: A flaw has been found in Dexmal Dexbotic up to 0.2.06.3 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-117509: crownpku Rasa_NLU_Chi: A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.26.3 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-104189: maz1987in 3Dviewer-Nextcloud: The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file…7.5 HighN/AN/AOct 27, 2026
1-25 of 522616
›