The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-74036: Wazuh wazuh-agent: Wazuh from 4.3.0 before 4.14.8 contains a remote code execution vulnerability where SCA policy trust is determined by…7.2 High8.6 High1%Oct 13, 2026
CVE-2026-74035: Wazuh wazuh-manager: Wazuh versions from 4.6.0 before 4.14.8 contain an authentication bypass vulnerability where security.update_user…7.2 High8.6 High1%Oct 13, 2026
CVE-2026-74034: Wazuh wazuh-manager: Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that allows enrolled agents to issue…7.5 High8.7 High0%Oct 13, 2026
CVE-2026-74033: Wazuh wazuh-manager: Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB…6.1 Medium8.4 High0%Oct 13, 2026
CVE-2026-74032: Wazuh wazuh-manager: Wazuh from 4.0.0 before 4.14.8 contains an authorization bypass vulnerability that allows low-privileged authenticated…4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-74031: Wazuh wazuh-manager: Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file…6.5 Medium7.0 High1%Oct 13, 2026
CVE-2026-74030: Wazuh: Wazuh from 3.9.0 before 4.14.8 contains an uncontrolled YAML alias expansion vulnerability in yaml2json_node that…4.9 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109967: NULL Pointer Dereference7.5 High8.7 High1%Oct 13, 2026
CVE-2026-109966: Improper Neutralization of Argument Delimiters in a Command5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109965: Improper Link Resolution Before File Access7.1 High8.4 High0%Oct 13, 2026
CVE-2026-109964: Buffer Underwrite5.6 Medium6.3 Medium0%Oct 13, 2026
CVE-2026-109963: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109962: Improper Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109961: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.5 High8.4 High0%Oct 13, 2026
CVE-2026-109960: Improper Neutralization of Input During Web Page Generation7.7 High8.7 High0%Oct 13, 2026
CVE-2026-109959: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109958: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109957: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109956: Improper Limitation of a Pathname to a Restricted Directory7.0 High8.3 High0%Oct 13, 2026
CVE-2026-109955: Double Decoding of the Same Data5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization6.5 Medium8.3 High0%Oct 13, 2026
CVE-2026-109953: Insufficiently Protected Credentials5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109952: Selection of Less-Secure Algorithm During Negotiation5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109951: Out-of-bounds Read5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109950: Out-of-bounds Read4.3 Medium5.3 Medium0%Oct 13, 2026
2951-2975 of 443731
‹›