The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57202: asterisk: Asterisk is an open source private branch exchange and telephony toolkit8.1 HighN/AN/AOct 27, 2026
CVE-2026-57188: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A7.1 HighN/AOct 27, 2026
CVE-2026-116682: gtsteffaniak filebrowser: FileBrowser Quantum is a free, self-hosted, web-based file manager8.6 HighN/AN/AOct 27, 2026
CVE-2026-117526: reduxjs redux-devtools: A vulnerability was found in reduxjs redux-devtools 5.0.05.3 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116680: sysadminsmedia homebox: HomeBox is a home inventory and organization system6.4 MediumN/AN/AOct 27, 2026
CVE-2026-88812: X.org, x.org: A double free in XKB SetGeometryin X.Org X Server before 21.1.25 and X Wayland before 24.1.14 could be used by attached…7.8 HighN/AN/AOct 27, 2026
CVE-2026-102816: TP-Link Systems Inc. RE305 v3: An authorization vulnerability exists in the country or region configuration interface of TP-Link RE305 V3N/A5.3 MediumN/AOct 27, 2026
CVE-2026-102815: TP-Link Systems Inc. RE305 v3: An operating-system command injection vulnerability exists in the tmpServer service of TP-Link RE305 V3N/A6.9 MediumN/AOct 27, 2026
CVE-2026-102814: TP-Link Systems Inc. RE305 v3: An authentication weakness exists in the TP-Link TDDP v2 service of TP-Link RE305 V3N/A8.7 HighN/AOct 27, 2026
CVE-2026-102813: TP-Link Systems Inc. RE305 v3: An authentication flaw exists in the password-recovery functionality of TP-Link RE305 V3N/A6.1 MediumN/AOct 27, 2026
CVE-2026-102812: TP-Link Systems Inc.: A hard-coded cryptographic key vulnerability exists in the user-configuration backup mechanism of TP-Link RE305 V3 and…N/A6.9 MediumN/AOct 27, 2026
CVE-2026-118132: NextChat: NextChat version 2.16.1 contains a client‑side cross‑site scripting (XSS) vulnerability in the Plugin Editor due to…N/AN/AN/AOct 27, 2026
CVE-2026-108311: Tanium Tanium Server: Tanium addressed an insufficient logging vulnerability in Tanium Server.2.7 LowN/AN/AOct 27, 2026
CVE-2026-108303: Tanium Certificate Manager: Tanium addressed an unauthorized code execution vulnerability in Certificate Manager.8.8 HighN/AN/AOct 27, 2026
CVE-2026-108316: Tanium Tanium Server: Tanium addressed an information disclosure vulnerability in Tanium Server.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116656: Tanium Enforce: Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.7.5 HighN/AN/AOct 27, 2026
CVE-2026-108325: Tanium Reputation: Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.6.6 MediumN/AN/AOct 27, 2026
CVE-2026-116659: Tanium Enforce: Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108302: Tanium Comply: Tanium addressed an improper access controls vulnerability in Comply.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108306: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-108329: Tanium Threat Response: Tanium addressed an unauthorized code execution vulnerability in Threat Response.8.8 HighN/AN/AOct 27, 2026
CVE-2026-108332: Tanium: Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.6.3 MediumN/AN/AOct 27, 2026
CVE-2026-108301: Tanium Comply: Tanium addressed an improper access controls vulnerability in Comply.6.0 MediumN/AN/AOct 27, 2026
CVE-2026-108304: Tanium: Tanium addressed a local privilege escalation vulnerability in End-User Notifications.7.8 HighN/AN/AOct 27, 2026
CVE-2026-87086: Tanium Provision: Tanium addressed a denial of service vulnerability in Provision.7.5 HighN/AN/AOct 27, 2026
1-25 of 522616
›