The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116554: n/a Argilla: A flaw has been found in Argilla up to 2.8.03.5 Low5.1 MediumN/AOct 26, 2026
CVE-2026-116515: itsourcecode Online Book Store: A security vulnerability has been detected in itsourcecode Online Book Store 1.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116591: klauspost compress: compress provides various compression algorithmsN/A8.7 HighN/AOct 26, 2026
CVE-2026-116748: transmission: Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handle_request() in rpc-server.cc that…8.8 High8.7 HighN/AOct 26, 2026
CVE-2026-116747: rajnandan1 kener: Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to…8.1 High9.2 CriticalN/AOct 26, 2026
CVE-2026-116746: qloapps: QloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116745: qloapps: QloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that…6.5 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116744: ntop nDPI: ntop nDPI through 6.0 contains an out-of-bounds read vulnerability in dissect_softether_host_fqdn() in softether.c that…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116743: libyal libmsiecf: libyal libmsiecf through 20260525 contains a double free vulnerability in libmsiecf_url_values_read_data() that allows…5.5 Medium6.8 MediumN/AOct 26, 2026
CVE-2026-116742: samtools htslib: HTSlib through 1.24 contains a heap out-of-bounds write and read vulnerability in bgzf_index_load_hfile() in bgzf.c…4.4 Medium4.8 MediumN/AOct 26, 2026
CVE-2026-116741: xiph speex: Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in…6.5 Medium8.3 HighN/AOct 26, 2026
CVE-2026-116740: netsurf-browser libcss: libcss through 0.9.2 contains a NULL pointer dereference vulnerability in mq_parse_media_query() that allows remote…6.5 Medium7.1 HighN/AOct 26, 2026
CVE-2026-116739: kisli vmime: VMime through 0.9.2 contains an information disclosure vulnerability in the uuEncoder::decode function that writes…4.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116738: kisli vmime: VMime through 0.9.2 contains an integer underflow in the uuEncoder::decode function that allows remote attackers to…8.8 High8.7 HighN/AOct 26, 2026
CVE-2026-116737: libyal libphdi: libphdi through 20260902 contains a heap out-of-bounds read vulnerability in…6.1 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116736: libyal libpff: Libpff through 20260926 contains a heap out-of-bounds read vulnerability in libpff_table_read_values_array because a 7c…6.1 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116735: libyal libpff: libpff through 20260926 contains an off-by-one bounds check in libpff_table_read_6c_record_entries that allows…6.1 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116734: dvidelabs flatcc: flatcc through 0.6.4 contains an integer overflow vulnerability in the check_header function of the FlatBuffers…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116733: dvidelabs flatcc: flatcc through 0.6.4 contains an out-of-bounds read vulnerability in __flatcc_json_parser_number that allows attackers…3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116732: davea42 libdwarf: libdwarf through 2.3.3 contains a heap out-of-bounds read vulnerability in dwarf_debug_addr_table() that omits the…4.4 Medium4.8 MediumN/AOct 26, 2026
CVE-2026-116731: tildearrow furnace: Furnace through 0.6.8.3 contains an out-of-bounds write vulnerability in DivEngine::loadFTM() that allows attackers to…6.1 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116730: tildearrow furnace: Furnace through 0.6.8.3 contains an out-of-bounds heap read vulnerability in DivEngine::loadFTM() in…5.5 Medium6.8 MediumN/AOct 26, 2026
CVE-2026-116729: libyal libfvde: libfvde through 20260923 contains a heap out-of-bounds read vulnerability in…3.3 Low4.8 MediumN/AOct 26, 2026
CVE-2026-116728: libyal libfvde: libfvde through 20260923 contains a heap out-of-bounds read vulnerability in…5.5 Medium6.8 MediumN/AOct 26, 2026
CVE-2026-116727: mmitch gbsplay: gbsplay through 0.0.103 contains a heap out-of-bounds read vulnerability in vgm_open() in gbs.c that walks the VGM…3.3 Low4.8 MediumN/AOct 26, 2026
1-25 of 416032
›