The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-68908: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…5.3 MediumN/AN/AOct 16, 2026
CVE-2026-68907: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…N/A8.2 HighN/AOct 16, 2026
CVE-2026-68906: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…N/A8.7 HighN/AOct 16, 2026
CVE-2026-57488: pupnp: pupnp is an SDK for development of UPnP device and control point applications7.1 HighN/AN/AOct 16, 2026
CVE-2026-57487: pupnp: pupnp is an SDK for development of UPnP device and control point applications7.5 HighN/AN/AOct 16, 2026
CVE-2026-57486: pupnp: pupnp is an SDK for development of UPnP device and control point applications7.5 HighN/AN/AOct 16, 2026
CVE-2026-57447: discourse discourse-doc-categories: Discourse Doc Categories is a plugin for organizing Discourse topics as documentation4.3 MediumN/AN/AOct 16, 2026
CVE-2026-57446: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…5.3 MediumN/AN/AOct 16, 2026
CVE-2026-55862: pupnp: pupnp is an SDK for development of UPnP device and control point applications6.5 MediumN/AN/AOct 16, 2026
CVE-2026-55836: open-zaak: Open Zaak is an open-source data and services layer for Dutch case-oriented working6.8 MediumN/AN/AOct 16, 2026
CVE-2026-55543: helge17 tuxguitar: TuxGuitar is an open-source guitar tablature editorN/A8.5 HighN/AOct 16, 2026
CVE-2026-54657: open-zaak: Open Zaak is an open-source data and services layer for Dutch case-oriented working6.5 MediumN/AN/AOct 16, 2026
CVE-2026-48741: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…7.5 HighN/AN/AOct 16, 2026
CVE-2026-48503: mz-automation libiec61850: libIEC61850 is an open-source implementation of IEC 61850 client and server protocols including MMS, GOOSE, Sampled…7.5 HighN/AN/AOct 16, 2026
FreeBSD: VID-05aadfcc-55f5-11f1-915c-8974b59277b5 (CVE-2026-46472): gstreamer1 -- multiple vulnerabilities7.5 HighN/AN/AOct 16, 2026
CVE-2026-46471: n/a: An issue was discovered in GStreamer gst-plugins-good before 1.28.2N/AN/AN/AOct 16, 2026
CVE-2026-44977: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution9.0 CriticalN/AN/AOct 16, 2026
CVE-2026-42270: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution7.5 HighN/AN/AOct 16, 2026
CVE-2026-42269: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution8.1 HighN/AN/AOct 16, 2026
CVE-2026-41582: Countly countly-server: countly-server is the server-side part of Countly, a product analytics solution7.5 HighN/AN/AOct 16, 2026
CVE-2026-26846: n/a: Buffer Overflow vulnerability in WEINVEIW CO.,LTD EBPro v.6.10.01.510_20251022 allows a remote attacker to execute…N/AN/AN/AOct 16, 2026
CVE-2026-111581: Red Hat: A flaw was found in libblockdev3.3 LowN/AN/AOct 16, 2026
CVE-2026-102941: gomarkdown markdown: The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML7.5 HighN/AN/AOct 16, 2026
CVE-2026-102923: CodeWithCJ SparkyFitness: SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families5.4 MediumN/AN/AOct 16, 2026
CVE-2026-97851: J4Care dcm4chee-arc-light: The storage status-change REST service allows location records still associated with DICOM instances to be changed to…9.1 Critical8.8 HighN/AOct 16, 2026
326-350 of 406803