The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-102503: Google SAM: Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress…N/A9.3 CriticalN/AOct 19, 2026
CVE-2026-112044: dotnet eShop: A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d297.3 High5.5 MediumN/AOct 19, 2026
CVE-2026-112043: calcom: A weakness has been identified in calcom cal.com and cal.diy up to 6.2.06.3 Medium5.3 MediumN/AOct 19, 2026
CVE-2026-112041: diem-project diem: A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad3.7 Low2.9 LowN/AOct 19, 2026
CVE-2026-112038: diem-project diem: A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad2.4 Low1.9 LowN/AOct 19, 2026
CVE-2026-112037: diem-project diem: A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad3.7 Low2.9 LowN/AOct 19, 2026
CVE-2026-108984: GeoVision Inc. GV-ASManager: A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .7.5 HighN/AN/AOct 19, 2026
CVE-2026-108983: GeoVision Inc. GV-ASManager: A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .9.8 CriticalN/AN/AOct 19, 2026
CVE-2026-112040: diem-project diem: A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad4.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112039: diem-project diem: A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad2.4 Low1.9 LowN/AOct 19, 2026
CVE-2026-112034: aircheng-org iWebShop-5: A weakness has been identified in aircheng-org iWebShop-5 up to 5.164.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112033: aircheng-org iWebShop-5: A security flaw has been discovered in aircheng-org iWebShop-5 up to 5.164.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112036: Artifex MuPDF: A vulnerability was detected in Artifex MuPDF up to 1.28.54.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112035: aircheng-org iWebShop-5: A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.166.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112030: diem-project diem: A vulnerability was found in diem-project diem up to 5.1.36.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-107083: n/a: SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection in…N/AN/AN/AOct 19, 2026
CVE-2026-107082: n/a: Slims (Senayan Library Management Systems) 9 Bulian 9.8.0 allows an authenticated staff user to perform SQL injection…N/AN/AN/AOct 19, 2026
CVE-2026-112032: aircheng-org iWebShop-5: A vulnerability was identified in aircheng-org iWebShop-5 up to 5.164.7 Medium2.0 LowN/AOct 18, 2026
CVE-2026-112031: Chamilo LMS: A vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.13.5 Low2.0 LowN/AOct 18, 2026
CVE-2026-112112: nic BIRD: An IPv6 FlowSpec validation bypass in the CZ.NIC BIRD Internet Routing Daemon allows an established BGP peer to inject…N/A2.3 LowN/AOct 18, 2026
CVE-2026-112029: diem-project diem: A vulnerability has been found in diem-project diem up to 5.1.32.5 Low1.1 LowN/AOct 18, 2026
CVE-2026-112026: light0011 cms: A security vulnerability has been detected in light0011 cms…3.7 Low2.9 LowN/AOct 18, 2026
CVE-2026-108519: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 18, 2026
CVE-2026-112028: light0011 cms: A flaw has been found in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b389306.5 Medium5.5 MediumN/AOct 18, 2026
CVE-2026-112111: Bootstrap Shortcodes project Bootstrap Shortcodes: The Bootstrap Shortcodes plugin for WordPress before 3.4.6 is vulnerable to stored XSS via the id attribute of the…N/A5.1 MediumN/AOct 18, 2026
301-325 of 409174
‹›