The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-102702: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-102700: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-102699: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-102672: Time-of-check Time-of-use (TOCTOU) Race Condition6.7 MediumN/A0%Oct 13, 2026
CVE-2026-101899: Protection Mechanism FailureN/A6.9 Medium1%Oct 13, 2026
CVE-2024-34326: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2024-34324: Undefined Security Weakness9.1 CriticalN/A0%Oct 13, 2026
CVE-2024-34323: Authorization Bypass Through User-Controlled Key10.0 CriticalN/A0%Oct 13, 2026
CVE-2024-34321: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2024-34320: Undefined Security Weakness9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-9218: NETGEAR: Insufficient input validation vulnerability in time server (NTP) setting of the listed NETGEAR models allows an…4.5 Medium4.3 Medium0%Oct 13, 2026
CVE-2026-97334: Commvault Commvault Cloud: The network messaging layer contained improper handling of highly compressed data affecting service availabilityN/A8.7 High0%Oct 13, 2026
CVE-2026-97333: Commvault Commvault Cloud: QAPI contained a stack-based buffer overflow affecting service availabilityN/A7.1 High0%Oct 13, 2026
CVE-2026-95127: n/a: An issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in…N/AN/A0%Oct 13, 2026
CVE-2026-95124: n/a: Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service…N/AN/A0%Oct 13, 2026
CVE-2026-95122: n/a: mp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp7.5 HighN/A1%Oct 13, 2026
CVE-2026-95121: n/a: An issue in mp4v2 2.0.0 allows an attacker to execute arbitrary code via the MP4RtpAtom::ReadHntiType() in…7.8 HighN/A0%Oct 13, 2026
CVE-2026-95117: n/a: Buffer Overflow vulnerability in zserge jsmn jsmn HEAD 25647e6 allows a remote attacker to cause a denial of service…N/AN/A0%Oct 13, 2026
CVE-2026-95115: n/a: Buffer Overflow vulnerability in libwebsockets main 106d542c allows a remote attacker to cause a denial of service via…7.5 HighN/A0%Oct 13, 2026
CVE-2026-95114: n/a: libwebsockets contains an out-of-bounds read vulnerability in the LEJP incremental parser in lib/misc/lejp.c7.5 HighN/A1%Oct 13, 2026
CVE-2026-77375: drakkan sftpgo: SFTPGo is an open source, event-driven file transfer solution6.5 MediumN/A0%Oct 13, 2026
CVE-2026-77100: Commvault Commvault Cloud: MediaAgent contained a heap-based buffer overflow issue affecting service availabilityN/A8.7 High0%Oct 13, 2026
CVE-2026-77099: Commvault: CVFS contained an input validation issue affecting command executionN/A9.3 Critical0%Oct 13, 2026
CVE-2026-77096: Commvault: CVFS contained a missing authentication condition affecting command executionN/A7.7 High0%Oct 13, 2026
CVE-2026-77095: Commvault Commvault Cloud: CvFWD contained a null pointer dereference affecting service availabilityN/A7.1 High0%Oct 13, 2026
2876-2900 of 443725
‹›