The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114624: baserproject basercms: baserCMS is a website development framework7.2 HighN/A1%Oct 23, 2026
CVE-2026-114623: baserproject basercms: baserCMS is a website development framework6.5 MediumN/A1%Oct 23, 2026
CVE-2026-114622: baserproject basercms: baserCMS is a website development framework7.2 HighN/A0%Oct 23, 2026
CVE-2026-114621: baserproject basercms: baserCMS is a website development framework8.8 HighN/A0%Oct 23, 2026
CVE-2026-10632: Zimbra Zimbra Collaboration Suite: A reflected cross-site scripting vulnerability in the Classic Web Client of Zimbra Collaboration Suite (ZCS) allows an…8.7 HighN/A0%Oct 23, 2026
CVE-2026-115786: Zimbra Zimbra Collaboration Suite: A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume…6.5 MediumN/A0%Oct 23, 2026
CVE-2026-114357: DJI CrystalSky ZS600C: Missing authentication for a critical function in the Android Debug Bridge daemon (adbd) in DJI CrystalSky ZS600C…N/A9.3 Critical0%Oct 23, 2026
CVE-2026-114356: DJI CrystalSky ZS600C: Missing authorization in the system-privileged 'DJIUpdateService' binder in DJI CrystalSky ZS600C firmware v0.3.9.7…N/A7.0 High0%Oct 23, 2026
CVE-2026-114355: DJI CrystalSky ZS600C: OS command injection in the root-privileged 'hardware_monitor' helper in DJI CrystalSky ZS600C firmware v0.3.9.7…N/A8.6 High1%Oct 23, 2026
CVE-2026-114354: DJI CrystalSky ZS600C: Missing authorization in the native binder service 'android.dji.server' (transaction code 1018) in DJI CrystalSky…N/A8.6 High0%Oct 23, 2026
CVE-2026-114353: DJI CrystalSky ZS600C: Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C…N/A7.0 High0%Oct 23, 2026
CVE-2026-93639: Zimbra Zimbra Collaboration Suite: A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no…8.7 HighN/A0%Oct 23, 2026
CVE-2026-93638: Zimbra Zimbra Collaboration Suite: A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an…6.1 MediumN/A0%Oct 23, 2026
CVE-2026-93636: Zimbra Zimbra Collaboration Suite: An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query…4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93634: Zimbra Zimbra Collaboration Suite: A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert…4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93633: Zimbra Zimbra Collaboration Suite: A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access…5.4 MediumN/A0%Oct 23, 2026
CVE-2026-93631: Zimbra Zimbra Collaboration Suite: A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition…7.1 HighN/A0%Oct 23, 2026
CVE-2026-93630: Zimbra Zimbra Collaboration Suite: A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an…4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93629: Zimbra Zimbra Collaboration Suite: An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to…5.3 MediumN/A0%Oct 23, 2026
CVE-2026-99087: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix NULL pointer dereference when the…N/AN/A0%Oct 23, 2026
CVE-2026-99086: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-integrity: validate the superblock on resume…N/AN/A0%Oct 23, 2026
CVE-2026-99085: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix CPU hotplug hang when a dying CPU's…N/AN/A0%Oct 23, 2026
CVE-2026-99084: Linux: In the Linux kernel, the following vulnerability has been resolved: readdir: take no inode lock on an immutable…N/AN/A0%Oct 23, 2026
CVE-2026-99083: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in…8.8 HighN/A0%Oct 23, 2026
CVE-2026-99082: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Use active memslots for the per-vCPU MMIO…8.8 HighN/A0%Oct 23, 2026
2476-2500 of 413066