The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-90921: IBM Maximo AI Service: IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to improper…7.5 HighN/A0%Oct 12, 2026
CVE-2026-90920: IBM Maximo AI Service: IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to improper control…9.8 CriticalN/A1%Oct 12, 2026
CVE-2026-90912: IBM Maximo AI Service: IBM Maximo AI Service 9.1.0, and 9.2.0 SaaS could allow a remote attacker to cause a denial of service due to…7.5 HighN/A0%Oct 12, 2026
CVE-2026-90911: IBM Maximo AI Service: IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to cause a denial of service due to uncontrolled…7.5 HighN/A0%Oct 12, 2026
CVE-2026-84312: 0xJacky nginx-ui: Nginx UI is a web user interface for the Nginx web server7.1 HighN/A0%Oct 12, 2026
CVE-2026-54459: error311 FileRise: FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations4.3 MediumN/A0%Oct 12, 2026
CVE-2026-53922: openwrt: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt6.5 MediumN/A0%Oct 12, 2026
CVE-2026-49484: Incomplete CleanupN/A5.1 Medium0%Oct 12, 2026
CVE-2026-49483: codefori vscode-ibmi: Code for IBMi is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platformN/A8.9 High0%Oct 12, 2026
CVE-2026-44828: Qexo: Qexo is an open source online editor for static blogsN/A9.3 Critical0%Oct 12, 2026
CVE-2026-41210: Out-of-bounds Write6.5 MediumN/A0%Oct 12, 2026
CVE-2026-108934: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Oct 12, 2026
CVE-2026-108933: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Oct 12, 2026
CVE-2026-108932: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 12, 2026
CVE-2026-104140: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 12, 2026
CVE-2026-103658: Heap-based Buffer Overflow5.9 MediumN/A0%Oct 12, 2026
CVE-2026-102596: Missing Authorization4.3 MediumN/A0%Oct 12, 2026
CVE-2026-102539: Cleartext Storage of Sensitive InformationN/A5.7 Medium0%Oct 12, 2026
CVE-2026-97691: Improper Access Control4.3 MediumN/A0%Oct 12, 2026
CVE-2026-96266: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96265: Improper Restriction of Operations within the Bounds of a Memory Buffer8.2 HighN/A0%Oct 12, 2026
CVE-2026-96264: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96263: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96262: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96261: Stack-based Buffer Overflow7.3 HighN/A0%Oct 12, 2026
3526-3550 of 443854
‹›