The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-61789: bytebase dbhub: DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB, SQLiteN/A6.1 MediumN/AOct 30, 2026
CVE-2026-55551: infonl dimpact-zaakafhandelcomponent: ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management6.5 MediumN/AN/AOct 30, 2026
CVE-2026-50000: freedomofpress securedrop: SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept…5.0 MediumN/AN/AOct 30, 2026
CVE-2026-39375: frappe lms: Frappe Learning Management System (LMS) is a learning system that helps users structure their contentN/A5.1 MediumN/AOct 30, 2026
CVE-2026-37468: n/a: Cross Site Scripting vulnerability in BeeHome MyBeeHome before 2025-11-01 allows a remote attacker to execute arbitrary…N/AN/AN/AOct 30, 2026
CVE-2026-119466: WPExperts APIExperts Square for WooCommerce: Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-119367: Liquid Web / StellarWP The Events Calendar: Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-119365: bPlugins Media Player Addons for Elementor – Media Player widget for WP: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-119300: wekan: Wekan is open source kanban built with Meteor6.5 MediumN/AN/AOct 30, 2026
CVE-2026-119299: gopacket: gopacket provides packet processing capabilities for Go5.9 MediumN/AN/AOct 30, 2026
CVE-2026-119298: schollz croc: croc is a tool that allows any two computers to simply and securely transfer files and folders4.2 MediumN/AN/AOct 30, 2026
CVE-2026-119148: AWS aws-nitro-enclaves-sdk-c: Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the…6.5 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119116: AWS kmstool-enclave: A use-after-free and double-free issue in the SetClient command handler of the kmstool-enclave sample application of…7.8 High8.7 HighN/AOct 30, 2026
CVE-2026-115642: OpenStack keystonemiddleware: In OpenStack keystonemiddleware before 13.0.2, by supplying a custom X-Service-Token header in a request, anyone in…8.3 HighN/AN/AOct 30, 2026
CVE-2026-112816: Canonical LXD: Improper certificate validation in the HTTPS listener in Canonical LXD 4.0.14, 5.0.10, 5.21.8, 6.9 before 4.0.15,…N/A10.0 CriticalN/AOct 30, 2026
CVE-2026-104623: SUSE Rancher: A security vulnerability exists in the authorization handling for the local (management) cluster shell feature of SUSE…6.3 MediumN/AN/AOct 30, 2026
CVE-2025-49602: n/a: An issue was discovered in Keyfactor EJBCA 9N/AN/AN/AOct 30, 2026
CVE-2026-62141: WP ManageNinja LLC Fluent CRM: Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-119722: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119721: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in…6.1 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-119720: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that…5.5 Medium6.8 MediumN/AOct 30, 2026
CVE-2026-119719: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119718: Blender Foundation Blender: Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119717: up9inc pybars4: pybars4 through 0.9.13 contains a code injection vulnerability in pybars/_compiler.py that allows attackers to execute…8.1 High9.2 CriticalN/AOct 30, 2026
CVE-2026-119716: wbond pybars3: pybars3 through 0.9.7 contains a code injection vulnerability in pybars/_compiler.py that allows template authors to…8.1 High9.2 CriticalN/AOct 30, 2026
226-250 of 418318