The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization4.8 MediumN/A0%Oct 13, 2026
CVE-2026-18343: Improper Privilege Management4.4 MediumN/A0%Oct 13, 2026
CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17487: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 13, 2026
CVE-2026-108941: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108940: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-108939: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-93892: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive…8.1 HighN/A0%Oct 12, 2026
CVE-2026-93891: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive…7.6 HighN/A0%Oct 12, 2026
CVE-2026-92832: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to…5.1 MediumN/A0%Oct 12, 2026
CVE-2026-85457: IBM Planning Analytics: IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary code due to a…8.1 HighN/A0%Oct 12, 2026
CVE-2026-84418: Improper Certificate Validation7.4 HighN/A0%Oct 12, 2026
CVE-2026-82110: Path Traversal9.9 CriticalN/A0%Oct 12, 2026
CVE-2026-82108: Code Injection8.8 HighN/A0%Oct 12, 2026
CVE-2026-82103: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information…6.5 MediumN/A0%Oct 12, 2026
CVE-2026-82101: Path Traversal9.6 CriticalN/A0%Oct 12, 2026
CVE-2026-82096: OS Command Injection8.8 HighN/A0%Oct 12, 2026
CVE-2026-75782: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to gain elevated privileges due to a…7.8 HighN/A0%Oct 12, 2026
CVE-2026-75621: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to…6.2 MediumN/A0%Oct 12, 2026
CVE-2026-75095: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to cause a denial of service due to…7.5 HighN/A0%Oct 12, 2026
CVE-2026-75076: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a remote attacker to obtain sensitive information due to…4.3 MediumN/A0%Oct 12, 2026
CVE-2026-75063: IBM Planning Analytics: IBM Planning Analytics 2.0, and 2.1 could allow a remote authenticated attacker to execute arbitrary JavaScript due to…5.4 MediumN/A0%Oct 12, 2026
CVE-2026-75061: IBM Planning Analytics: IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system7.5 HighN/A0%Oct 12, 2026
CVE-2026-19627: Improper Limitation of a Pathname to a Restricted Directory8.2 HighN/A0%Oct 12, 2026
3401-3425 of 443854
‹›