The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-76305: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-76301: Splunk Splunk Enterprise: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76297: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user…4.2 MediumN/A0%Oct 21, 2026
CVE-2026-94423: Key Exchange without Entity AuthenticationN/AN/A0%Oct 21, 2026
CVE-2026-94140: Key Exchange without Entity AuthenticationN/AN/A0%Oct 21, 2026
CVE-2026-91403: Java CPU October 2026 Oracle Java SE vulnerability9.1 CriticalN/A0%Oct 21, 2026
CVE-2026-114509: laravel framework: Laravel is a web application frameworkN/A9.2 Critical1%Oct 21, 2026
CVE-2026-114508: laravel framework: Laravel is a web application framework6.5 MediumN/A0%Oct 21, 2026
Red Hat: CVE-2026-114501: pillow: Pillow: Information disclosure via improper memory alignment during Arrow export5.3 Medium6.3 Medium0%Oct 21, 2026
CVE-2026-114384: itsourcecode Online Cake Ordering System: A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114383: TOTOLINK EX200: A weakness has been identified in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
CVE-2026-114381: itsourcecode Online Cake Ordering System: A vulnerability was determined in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-112921: Exposure of Data Element to Wrong SessionN/AN/A0%Oct 21, 2026
CVE-2026-114439: oretnom23 php-travel-agency-system: A vulnerability was determined in oretnom23 php-travel-agency-system7.3 High5.5 Medium1%Oct 21, 2026
CVE-2026-114382: TOTOLINK EX200: A security flaw has been discovered in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
Red Hat: CVE-2026-96644: pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser8.1 High7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96643: pillow: pillow: Denial of Service via repeated EXIF headers6.5 Medium7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96642: pillow: Pillow: Denial of Service via negative archive member size in TarIO6.5 Medium7.1 High0%Oct 21, 2026
CVE-2026-96639: python-pillow Pillow: Pillow is a Python imaging library9.8 CriticalN/A1%Oct 21, 2026
Red Hat: CVE-2026-96638: pillow: pillow: Denial of Service via crafted RLE BMP image6.5 MediumN/A0%Oct 21, 2026
Red Hat: CVE-2026-96637: pillow: pillow: Denial of Service via decompression bomb bypass in SPIDER images6.5 Medium7.1 High0%Oct 21, 2026
Red Hat: CVE-2026-96636: pillow: pillow: Denial of Service via decompression bomb check bypass in multi-frame images6.5 MediumN/A0%Oct 21, 2026
CVE-2026-82987: Viewsonic vCast: There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,…N/AN/A0%Oct 21, 2026
Red Hat: CVE-2026-114406: ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns6.8 MediumN/A0%Oct 21, 2026
CVE-2026-114380: itsourcecode Online Cake Ordering System: A vulnerability was found in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
2676-2700 of 522616