The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109402: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109190: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109189: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109160: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109157: Stack-based Buffer Overflow9.9 Critical8.6 High1%Oct 13, 2026
CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109153: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89208: Siemens: A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-89206: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89205: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89204: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89203: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89202: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-89201: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)7.5 High7.7 High0%Oct 13, 2026
CVE-2026-89200: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)6.7 Medium8.4 High0%Oct 13, 2026
CVE-2026-89199: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)8.8 High8.7 High0%Oct 13, 2026
CVE-2026-89198: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)8.8 High8.7 High0%Oct 13, 2026
CVE-2026-89197: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)8.8 High8.7 High0%Oct 13, 2026
CVE-2026-89196: Siemens RUGGEDCOM CROSSBOW: A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V6.0)8.8 High8.7 High0%Oct 13, 2026
CVE-2026-85115: Siemens .NET Client Library for SIMATIC S7 Webserver API: A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.62)5.5 Medium6.8 Medium0%Oct 13, 2026
CVE-2026-85114: Siemens .NET Client Library for SIMATIC S7 Webserver API: A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61)7.5 High8.7 High0%Oct 13, 2026
CVE-2026-78557: Siemens Industrial Edge App Publisher: A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9)8.3 High7.7 High0%Oct 13, 2026
CVE-2026-78556: Siemens Industrial Edge App Publisher: A vulnerability has been identified in Industrial Edge App Publisher (All versions < V1.27.9)7.4 High7.6 High0%Oct 13, 2026
CVE-2026-72895: Siemens: A vulnerability has been identified in SIMATIC IPC BX-21A (All versions < V31.01.13), SIMATIC IPC RW-543A (All versions…7.7 High8.4 High0%Oct 13, 2026
3226-3250 of 443854
‹›