The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105445: Incorrect Privilege AssignmentN/A9.4 Critical0%Oct 13, 2026
CVE-2026-104085: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High2%Oct 13, 2026
CVE-2026-104011: Undefined Security WeaknessN/AN/AN/AOct 13, 2026
CVE-2025-57739: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 13, 2026
CVE-2025-46773: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 13, 2026
Red Hat: CVE-2026-94603: podman: podman: The `podman run` command can be instructed to disable almost all sandboxing - including user-requested sandboxing - by image annotation10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-88838: Red Hat Red Hat Hardened Images: A flaw was found in BusyBox's mount utility5.5 MediumN/A0%Oct 13, 2026
CVE-2026-88834: Red Hat Red Hat Hardened Images: A flaw was found in BusyBox's httpd web server3.7 LowN/A0%Oct 13, 2026
CVE-2026-85990: leantime: Leantime is an open source project management system8.8 HighN/A0%Oct 13, 2026
CVE-2026-85733: php frankenphp: FrankenPHP is a modern application server for PHP5.3 MediumN/A0%Oct 13, 2026
CVE-2026-82416: php frankenphp: FrankenPHP is a modern application server for PHP7.7 HighN/A0%Oct 13, 2026
CVE-2026-78799: n/a: Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade…N/AN/A0%Oct 13, 2026
CVE-2026-77459: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-69227: Esri Portal for ArcGIS: A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific…9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-69226: Esri Portal for ArcGIS: A flaw in Portal for ArcGIS allows unauthenticated users to create new accounts through the sharing endpoint even when…6.5 MediumN/A0%Oct 13, 2026
CVE-2026-66057: frappe: Frappe is a full-stack web application frameworkN/A5.1 Medium0%Oct 13, 2026
Red Hat: CVE-2026-61642: squid: squid: Request Smuggling in HTTP Transfer-Encoding7.7 HighN/A5%Oct 13, 2026
CVE-2026-55823: frappe: Frappe is a full-stack web application frameworkN/A8.7 High0%Oct 13, 2026
CVE-2026-55562: jhuckaby Cronicle: Cronicle is a multi-server task scheduler and runner, with a web based front-end UI9.0 CriticalN/A0%Oct 13, 2026
CVE-2026-55183: Zarestia-Dev rclone-manager: RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-54641: openremote: OpenRemote is an open-source internet-of-things platform7.7 HighN/A0%Oct 13, 2026
CVE-2026-54640: openremote, io.openremote: OpenRemote is an open-source internet-of-things platform7.6 HighN/A0%Oct 13, 2026
CVE-2026-54454: OpenCATS: OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-53562: Citrix UniconOS: Improper link resolution before file access ('link following') vulnerability in Citrix UniconOSN/A8.5 High0%Oct 13, 2026
CVE-2026-19940: Use After Free6.5 MediumN/A0%Oct 13, 2026
2701-2725 of 444579
‹›