The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108185: Improper Certificate Validation7.4 HighN/A0%Oct 13, 2026
CVE-2026-108184: Improper Certificate Validation7.4 HighN/A0%Oct 13, 2026
CVE-2026-107918: Improper Input Validation4.5 Medium4.3 Medium0%Oct 13, 2026
CVE-2026-107917: Improper Input Validation4.5 Medium4.3 Medium0%Oct 13, 2026
CVE-2026-107460: Server-Side Request Forgery (SSRF)N/AN/A0%Oct 13, 2026
CVE-2026-106108: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.7 Medium0%Oct 13, 2026
CVE-2026-104192: Double Free9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-103028: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-102603: Unverified Password ChangeN/A5.3 Medium0%Oct 13, 2026
CVE-2026-102342: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-102250: Insufficient Verification of Data AuthenticityN/A8.6 High0%Oct 13, 2026
CVE-2024-34319: Undefined Security Weakness6.5 MediumN/A0%Oct 13, 2026
CVE-2026-95680: IBM WebSphere Application Server: IBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to…8.0 HighN/A0%Oct 13, 2026
CVE-2026-93907: IBM WebSphere Application Server: IBM WebSphere Application Server 8.5, and 9.0 could allow a remote attacker to bypass authentication by exploiting a…8.1 HighN/A0%Oct 13, 2026
CVE-2026-93347: Wazuh wazuh-manager: Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows…4.9 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-93346: Wazuh wazuh-manager: Wazuh from 4.0.0 before 4.14.8 contains a race condition in API login throttling that allows unauthenticated attackers…5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-77362: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults4.3 MediumN/A0%Oct 13, 2026
CVE-2026-77361: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults4.7 MediumN/A0%Oct 13, 2026
CVE-2026-74047: Wazuh wazuh-manager: Wazuh from 4.0.0 before 4.14.8 contains an information disclosure vulnerability that allows low-privileged users with…6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-74045: Wazuh wazuh-manager: Wazuh from 3.12.0 before 4.14.8 contains a heap buffer overflow in fim_generate_alert() where full_log is sized from…7.1 High7.1 High0%Oct 13, 2026
CVE-2026-74043: Wazuh wazuh-manager: Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and…9.0 Critical8.5 High0%Oct 13, 2026
CVE-2026-74041: Wazuh wazuh-manager: Wazuh 4.14.3 before 4.14.8 contains a case-sensitivity mismatch between the ossec.conf validator and wazuh-logcollector…9.1 Critical9.4 Critical0%Oct 13, 2026
CVE-2026-74040: Wazuh wazuh-manager: Wazuh versions from 3.9.0 before 4.14.8 contain an arbitrary file overwrite vulnerability in…9.1 Critical9.4 Critical1%Oct 13, 2026
CVE-2026-74037: Wazuh wazuh-manager: Wazuh 4.0.0 before 4.14.8 fails to invalidate issued tokens for run_as users with zero static roles, because…7.2 High8.6 High0%Oct 13, 2026
CVE-2026-74036: Wazuh wazuh-agent: Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by…7.2 High8.6 High1%Oct 13, 2026
2926-2950 of 443730
‹›