The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-77100: Commvault Commvault Cloud: MediaAgent contained a heap-based buffer overflow issue affecting service availabilityN/A8.7 High0%Oct 13, 2026
CVE-2026-77099: Commvault: CVFS contained an input validation issue affecting command executionN/A9.3 Critical0%Oct 13, 2026
CVE-2026-77096: Commvault: CVFS contained a missing authentication condition affecting command executionN/A7.7 High0%Oct 13, 2026
CVE-2026-77095: Commvault Commvault Cloud: CvFWD contained a null pointer dereference affecting service availabilityN/A7.1 High0%Oct 13, 2026
CVE-2026-77094: Commvault Commvault Cloud: CvFWD contained an out-of-bounds write affecting service availabilityN/A7.1 High0%Oct 13, 2026
CVE-2026-77093: Commvault Commvault Cloud: CvFWD contained an integer overflow affecting service availabilityN/A7.1 High0%Oct 13, 2026
CVE-2026-77090: Commvault: CVFS contained an XML external entity (XXE) reference handling issue affecting information dislcosureN/A8.7 High0%Oct 13, 2026
CVE-2026-65200: Huawei openBMC: The openUBMC device-management process parses PLDM-over-MCTP and NCSI-over-MCTP responses from on-bus devices, and…3.5 LowN/A0%Oct 13, 2026
CVE-2026-65199: Huawei openBMC: openUBMC assigns the full privilege set to pseudo-identities representing SNMP callers5.4 MediumN/A0%Oct 13, 2026
CVE-2026-65198: Huawei openUBMC: Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy8.6 HighN/A0%Oct 13, 2026
CVE-2026-65197: H3C HDM Family-A G5: H3C HDM Family-A verifies the RSA signature of a firmware image against a public key it reads from the mutable file…3.1 LowN/A0%Oct 13, 2026
CVE-2026-53711: IBM mcp-context-forge: MCP Context Forge provides an MCP Admin UI for managing gateway resourcesN/A5.1 Medium0%Oct 13, 2026
CVE-2026-53709: IBM mcp-context-forge: MCP Context Forge is an MCP gateway and administrative platform9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-53420: Zoom Communications Zoom Workplace: Buffer overflow in a Zoom Phone feature of Zoom Workplace Clients may allow an unauthenticated user to conduct a…8.0 HighN/A0%Oct 13, 2026
CVE-2026-53418: Zoom Communications Zoom Workplace: Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace for Android before version 7.2.1 may allow an…8.1 HighN/A0%Oct 13, 2026
CVE-2026-4869: Flexera InstallShield: A potential privilege escalation issue was identified in InstallShield version 2025 R2 and earlier when running…N/A5.4 Medium0%Oct 13, 2026
CVE-2026-18228: Undefined Security WeaknessN/A7.1 High0%Oct 13, 2026
CVE-2026-12656: Allocation of Resources Without Limits or ThrottlingN/A8.7 High0%Oct 13, 2026
CVE-2026-12655: Authentication Bypass by Capture-replayN/A8.8 High0%Oct 13, 2026
CVE-2026-11732: Improper Input Validation8.8 High6.3 Medium0%Oct 13, 2026
CVE-2026-11731: Authentication Bypass Using an Alternate Path or Channel8.8 High6.3 Medium0%Oct 13, 2026
CVE-2026-11730: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)5.4 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109523: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109522: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109521: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
2901-2925 of 443730
‹›