The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101294: IBM: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 and IBM WebSphere Application Server 8.5, and 9.0…8.7 HighN/AN/AOct 13, 2026
CVE-2026-100131: Adobe Substance 3D Sampler: Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-100130: Adobe Substance 3D Sampler: Substance3D - Sampler is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-100129: Adobe Adobe Bridge: Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context…7.8 HighN/AN/AOct 13, 2026
CVE-2026-100128: Adobe Adobe Bridge: Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context…7.8 HighN/AN/AOct 13, 2026
CVE-2026-100127: Adobe Adobe Bridge: Bridge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context…7.8 HighN/AN/AOct 13, 2026
CVE-2026-100126: Adobe Adobe Bridge: Bridge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory5.5 MediumN/AN/AOct 13, 2026
CVE-2026-100112: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-100111: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-62840: Microsoft: Time-of-check time-of-use (toctou) race condition in Linux Kernel allows an authorized attacker to elevate privileges…7.0 HighN/AN/AOct 13, 2026
CVE-2026-67628: Microsoft: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.4.9 MediumN/AN/AOct 13, 2026
CVE-2026-67626: Microsoft: Uncontrolled resource consumption in SQL Server allows an authorized attacker to deny service over a network.6.5 MediumN/AN/AOct 13, 2026
CVE-2026-65674: Microsoft: Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-70189: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.6.7 MediumN/AN/AOct 13, 2026
CVE-2026-68883: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges over a network.8.5 HighN/AN/AOct 13, 2026
CVE-2026-67625: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.8.5 HighN/AN/AOct 13, 2026
CVE-2026-90532: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-90531: Adobe: Adobe Experience Manager is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability…9.6 CriticalN/AN/AOct 13, 2026
CVE-2026-86022: vnotex vnote: VNote is a note-taking platform7.0 HighN/AN/AOct 13, 2026
CVE-2026-86016: vnotex vnote: VNote is a note-taking platform8.2 HighN/AN/AOct 13, 2026
CVE-2026-83960: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-83958: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-83662: Adobe: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 13, 2026
CVE-2026-75732: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/AOct 13, 2026
CVE-2026-70098: Microsoft Visual Studio Code: Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
301-325 of 417606
‹›