The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111608: jeequan jeepay: Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant…4.2 Medium2.3 LowN/AOct 16, 2026
CVE-2026-111607: jeequan jeepay: Jeepay through 3.2.9 contains an insecure direct object reference vulnerability that allows authenticated merchant…7.1 High7.1 HighN/AOct 16, 2026
CVE-2026-111606: hcengineering Huly Platform: Huly Platform through 0.7.432 contains a missing authorization vulnerability that allows any authenticated user to…8.1 High8.6 HighN/AOct 16, 2026
CVE-2026-111605: dromara Jpom: Jpom through 2.11.12 contains an authorization bypass vulnerability in SshFileController that allows authenticated…8.1 High8.6 HighN/AOct 16, 2026
CVE-2026-111604: elunez eladmin: eladmin through 2.7 contains an authorization bypass vulnerability that allows department-scoped user managers to…3.8 Low5.1 MediumN/AOct 16, 2026
CVE-2026-111603: PlayEdu: PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated…4.3 Medium5.3 MediumN/AOct 16, 2026
CVE-2026-111392: sgl-project sglang: SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote…4.8 Medium6.3 MediumN/AOct 16, 2026
CVE-2026-109839: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.0 could allow a remote authenticated attacker to bypass security restrictions due to a missing…3.1 LowN/AN/AOct 16, 2026
CVE-2026-109838: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.0 could allow a local attacker to obtain sensitive information due to improper verification of…5.1 MediumN/AN/AOct 16, 2026
CVE-2026-109588: FreeRTOS FreeRTOS-Kernel: Numeric truncation of the buffer length in the MPU buffer authorization check in FreeRTOS-Kernel V11.3.0 and V11.3.1 on…8.8 High9.3 CriticalN/AOct 16, 2026
CVE-2026-109587: FreeRTOS FreeRTOS-Kernel: Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might…8.8 High9.3 CriticalN/AOct 16, 2026
CVE-2026-109461: Microsoft Microsoft Identity Client for NodeJS: Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to…5.9 MediumN/AN/AOct 16, 2026
CVE-2026-102552: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before…5.9 Medium8.2 HighN/AOct 16, 2026
CVE-2026-102551: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon…7.7 High9.2 CriticalN/AOct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server8.8 HighN/AN/AOct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server7.7 HighN/AN/AOct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker imagesN/A8.2 HighN/AOct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images7.2 HighN/AN/AOct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server5.4 MediumN/AN/AOct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server4.3 MediumN/AN/AOct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…7.1 HighN/AN/AOct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules4.9 MediumN/AN/AOct 16, 2026
276-300 of 552532
‹›