The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114576: Linksys RE6250: A vulnerability has been found in Linksys RE6250 1.0.04.0013.7 Low2.9 Low1%Oct 22, 2026
CVE-2026-114730: Roundcube Webmail: Roundcube Webmail 1.6.14 before 1.6.20 and 1.7.0 before 1.7.5 is affected by a server-side request forgery filter bypass7.2 HighN/A0%Oct 22, 2026
CVE-2026-114577: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 22, 2026
CVE-2026-114726: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability in the…5.8 MediumN/A0%Oct 22, 2026
CVE-2026-114661: openremote: OpenRemote 1.2.0 before 1.31.0 contains a missing authorization vulnerability in GatewayServiceResource that allows any…8.5 High9.0 Critical0%Oct 22, 2026
CVE-2026-114657: getgrav grav: Grav from 2.0.0 before 2.2.5 contains an information disclosure vulnerability that allows page authors to capture…5.7 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-114640: traefik: Traefik from v3.7.0 before v3.7.14 contains an authentication bypass vulnerability in its Kubernetes Ingress-NGINX…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114636: traefik: Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114722: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a CSS scoping bypass in HTML messages6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114718: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a cross-site scripting vulnerability in the…4.7 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-16255: Incorrect Authorization5.9 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-15723: Improper Neutralization of Special Elements used in an LDAP Query8.2 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-14288: Use of Incorrectly-Resolved Name or Reference3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-13319: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-12664: Incorrect Authorization6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114575: TOTOLINK A950RG: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 Critical2%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112378: Use of Less Trusted Source4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112326: Improper Cleanup on Thrown Exception3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112212: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-110264: Integer Overflow or Wraparound10.0 CriticalN/A1%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105777: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105711: Use of Cache Containing Sensitive Information3.5 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-103515: Incorrect Authorization2.7 LowN/A0%Oct 22, 2026
CVE-2026-114714: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114574: massCodeIO massCode: A security vulnerability has been detected in massCodeIO massCode 5.104.3 Medium2.1 Low0%Oct 21, 2026
2626-2650 of 522616