The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-97394: kin-openapi is a Go project for handling OpenAPI files7.5 HighN/AN/AOct 15, 2026
CVE-2026-95155: Uncontrolled Recursion7.5 HighN/AN/AOct 15, 2026
CVE-2026-92982: A flaw was found in Ansible Operator Plugins8.5 HighN/AN/AOct 15, 2026
CVE-2026-88753: A Regular-Expression Denial of Service (ReDoS) in the Markdown2N/AN/AN/AOct 15, 2026
CVE-2026-75505: EspoCRM is an open source customer relationship management applicationN/A6.0 MediumN/AOct 15, 2026
CVE-2026-71490: OPNsense is a FreeBSD based firewall and routing platform7.1 HighN/AN/AOct 15, 2026
CVE-2026-63442: OPNsense is a FreeBSD based firewall and routing platform8.1 HighN/AN/AOct 15, 2026
CVE-2026-58395: OPNsense is a FreeBSD based firewall and routing platform4.3 MediumN/AN/AOct 15, 2026
CVE-2026-58394: OPNsense is a FreeBSD based firewall and routing platform5.2 MediumN/AN/AOct 15, 2026
CVE-2026-58393: OPNsense is a FreeBSD based firewall and routing platform5.9 MediumN/AN/AOct 15, 2026
CVE-2026-58392: OPNsense is a FreeBSD based firewall and routing platform5.4 MediumN/AN/AOct 15, 2026
CVE-2026-58391: OPNsense is a FreeBSD based firewall and routing platform5.4 MediumN/AN/AOct 15, 2026
CVE-2026-58390: OPNsense is a FreeBSD based firewall and routing platform8.0 HighN/AN/AOct 15, 2026
CVE-2026-57155: OPNsense is a FreeBSD based firewall and routing platform9.9 CriticalN/AN/AOct 15, 2026
CVE-2026-53582: OPNsense is a FreeBSD based firewall and routing platform7.1 HighN/AN/AOct 15, 2026
CVE-2026-52167: A stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service…N/AN/AN/AOct 15, 2026
CVE-2026-45452: Use of Externally-Controlled Format String8.3 HighN/AN/AOct 15, 2026
CVE-2026-45451: Improper Authentication8.3 HighN/AN/AOct 15, 2026
CVE-2026-45450: Buffer Overflow8.3 HighN/AN/AOct 15, 2026
CVE-2026-45449: OS Command Injection8.3 HighN/AN/AOct 15, 2026
CVE-2026-111096: Cross-site Scripting (XSS)6.7 MediumN/AN/AOct 15, 2026
CVE-2026-111095: Cross-site Scripting (XSS)8.0 HighN/AN/AOct 15, 2026
CVE-2026-111094: Deserialization of Untrusted Data8.1 HighN/AN/AOct 15, 2026
CVE-2026-111093: Relative Path Traversal7.5 HighN/AN/AOct 15, 2026
CVE-2026-111092: Missing Authorization6.5 MediumN/AN/AOct 15, 2026
326-350 of 735990