The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-91047: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not properly restrict access to protected…5.3 MediumN/AN/AOct 19, 2026
CVE-2026-91046: Unknown ElementsReady Addons for Elementor: The ElementsReady Addons for Elementor WordPress plugin through 6.7.2 does not perform authorization checks that halt…4.3 MediumN/AN/AOct 19, 2026
CVE-2026-89286: Unknown FormFlow for GoHighLevel (GHL): The FormFlow for GoHighLevel (GHL) WordPress plugin through 1.0.0 does not restrict access to a log file it writes…5.3 MediumN/AN/AOct 19, 2026
CVE-2026-76739: Hewlett Packard Enterprise: A potential security vulnerability in HPE Compute Scale-up Server 3200 and 3250 platforms and Superdome Flex server…4.3 MediumN/AN/AOct 19, 2026
CVE-2026-16487: Red Hat: A flaw was found in bootc when operating with the default containers signature policy8.1 HighN/AN/AOct 19, 2026
CVE-2026-112086: n/a ESPnet: A vulnerability was found in ESPnet up to 202610.post26.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112083: sgl-project SGLang: A security flaw has been discovered in sgl-project SGLang up to 0.5.195.3 Medium5.5 MediumN/AOct 19, 2026
CVE-2026-112082: sgl-project SGLang: A vulnerability was identified in sgl-project SGLang up to 0.5.197.5 High7.7 HighN/AOct 19, 2026
CVE-2026-112081: hankcs HanLP: A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.646.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-108121: Koozali SME Server: Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's…N/A6.9 MediumN/AOct 19, 2026
CVE-2026-108120: koozali SME Server: Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of…N/A7.7 HighN/AOct 19, 2026
CVE-2026-106933: Unknown Blaze Demo Importer: The Blaze Demo Importer WordPress plugin before 1.0.17 does not sanitize uploaded SVG files and registers the SVG MIME…6.8 MediumN/AN/AOct 19, 2026
CVE-2026-106028: Unknown ActiveTrail for WooCommerce: The ActiveTrail for WooCommerce WordPress plugin through 1.2.6 does not perform any authorization check before creating…5.3 MediumN/AN/AOct 19, 2026
CVE-2026-106014: Unknown Gateway for Vantiv on WC: The Gateway for Vantiv on WC WordPress plugin through 1.0.1 does not verify the authenticity of the payment…5.3 MediumN/AN/AOct 19, 2026
CVE-2026-112080: LlamaChinese Llama-Chinese: A vulnerability was found in LlamaChinese Llama-Chinese up to 6fa0fffb0dd82fe3cfaa1449ee54a5806d26ae9b6.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112079: hankcs HanLP: A vulnerability has been found in hankcs HanLP up to 2.1.0-beta.646.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112078: RVC-Project Retrieval-based-Voice-Conversion-WebUI: A flaw has been found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.3.2607186.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112077: radareorg radare2: A vulnerability was detected in radareorg radare2 6.2.0/6.2.25.6 Medium6.3 MediumN/AOct 19, 2026
CVE-2026-112076: alexta69 MeTube: A security vulnerability has been detected in alexta69 MeTube up to 2026.09.285.6 Medium2.9 LowN/AOct 19, 2026
CVE-2026-112075: unslothai unsloth: A weakness has been identified in unslothai unsloth up to 0.1.501-beta6.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112074: Tencent ncnn: A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b66.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112073: Tencent ncnn: A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b66.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112045: n/a donetick: A vulnerability was detected in donetick up to 0.1.825.4 Medium2.1 LowN/AOct 19, 2026
CVE-2026-111440: openGauss-server openGauss-connector-jdbc: 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接参数中的 logger…7.0 HighN/AN/AOct 19, 2026
CVE-2026-112044: dotnet eShop: A security vulnerability has been detected in dotnet eShop up to 913acea66708a59595351174cee9b29f37179d297.3 High5.5 MediumN/AOct 19, 2026
301-325 of 409174
‹›