The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109587: FreeRTOS FreeRTOS-Kernel: Incorrect authorization in the Arm Cortex-R82 (Armv8-R AArch64) MPU port in FreeRTOS-Kernel V11.3.0 and V11.3.1 might…8.8 High9.3 CriticalN/AOct 16, 2026
CVE-2026-109461: Microsoft Microsoft Identity Client for NodeJS: Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to…5.9 MediumN/AN/AOct 16, 2026
CVE-2026-102552: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before…5.9 Medium8.2 HighN/AOct 16, 2026
CVE-2026-102551: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon…7.7 High9.2 CriticalN/AOct 16, 2026
CVE-2026-111678: Adri van Os antiword: Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c…3.3 Low4.8 MediumN/AOct 16, 2026
CVE-2026-111677: Adri van Os antiword: Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted…5.5 Medium6.8 MediumN/AOct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server8.8 HighN/AN/AOct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server7.7 HighN/AN/AOct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker imagesN/A8.2 HighN/AOct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images7.2 HighN/AN/AOct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server5.4 MediumN/AN/AOct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/AN/AOct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server4.3 MediumN/AN/AOct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…7.1 HighN/AN/AOct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules4.9 MediumN/AN/AOct 16, 2026
CVE-2026-59967: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists5.4 MediumN/AN/AOct 16, 2026
CVE-2026-59962: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists6.5 MediumN/AN/AOct 16, 2026
CVE-2026-57169: Finsys dockhand: Dockhand is a Docker management application9.6 CriticalN/AN/AOct 16, 2026
CVE-2026-49868: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.8 CriticalN/AN/AOct 16, 2026
CVE-2026-102693: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.6 CriticalN/AN/AOct 16, 2026
CVE-2026-102692: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.1 CriticalN/AN/AOct 16, 2026
CVE-2026-96425: UBports lomiri-download-manager: Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus5.5 MediumN/AN/AOct 16, 2026
CVE-2026-96424: UBports lomiri-download-manager: Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read…7.8 HighN/AN/AOct 16, 2026
376-400 of 406803
‹›