The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114046: FreeRDP: FreeRDP 3.0.0 before 3.32.0 contains a null-pointer dereference in the smartcard emulation backend that accepts a null…6.5 Medium7.1 High0%Oct 21, 2026
CVE-2026-114045: Heap-based Buffer Overflow8.8 High8.7 High1%Oct 21, 2026
CVE-2026-114044: FreeRDP: FreeRDP before 3.32.1 contains a heap out-of-bounds read vulnerability in the Android client that allows malicious RDP…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114043: FreeRDP: FreeRDP before 3.32.1 contains a heap-based out-of-bounds read in WinPR's clipboard PNG-to-CF_DIB synthesis because…6.5 Medium7.1 High0%Oct 21, 2026
CVE-2026-114042: Use After Free6.5 Medium7.1 High0%Oct 21, 2026
CVE-2026-114041: FreeRDP: FreeRDP before 3.32.1 on Windows contains a heap out-of-bounds read in client_cli_present_gateway_message that passes a…6.5 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114038: Out-of-bounds Read5.1 MediumN/A0%Oct 21, 2026
CVE-2026-113741: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-113740: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-113738: R6410418 Jackrong-llm-finetuning-guide: A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d096.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-113737: R6410418 Jackrong-llm-finetuning-guide: A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d095.5 Medium2.0 Low0%Oct 21, 2026
CVE-2026-113736: D-Link DHP-W610AV: A vulnerability has been found in D-Link DHP-W610AV 1.02EUb039.8 Critical8.9 High1%Oct 21, 2026
CVE-2026-111943: Undefined Security WeaknessN/AN/A0%Oct 21, 2026
CVE-2026-105044: Qingteng Host Adaptive Security Platform: Improper Neutralization of Special Elements used in an OS Command in Security Toolbox versions before 20260929 in…N/A8.5 High1%Oct 21, 2026
CVE-2025-71437: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium8.7 High0%Oct 21, 2026
CVE-2021-48020: Out-of-bounds Write6.5 Medium8.3 High0%Oct 21, 2026
CVE-2021-48019: Buffer Access with Incorrect Length Value4.8 Medium6.3 Medium0%Oct 21, 2026
CVE-2021-48018: Out-of-bounds Write7.4 High8.3 High0%Oct 21, 2026
CVE-2020-37289: Improper Input Validation3.7 Low6.3 Medium0%Oct 21, 2026
CVE-2020-37288: Always-Incorrect Control Flow Implementation3.7 Low6.3 Medium0%Oct 21, 2026
CVE-2020-37287: Incorrect Calculation of Buffer Size5.9 Medium8.2 High0%Oct 21, 2026
CVE-2020-37286: Out-of-bounds Write6.5 Medium8.3 High0%Oct 21, 2026
CVE-2026-113735: Use of Weak Credentials3.7 Low2.9 Low1%Oct 21, 2026
CVE-2026-113707: a2aproject a2a-rs: A security flaw has been discovered in a2aproject a2a-rs up to 0.4.45.4 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-113706: a2aproject a2a-rs: A vulnerability was identified in a2aproject a2a-rs up to 0.4.33.5 Low5.1 Medium0%Oct 21, 2026
4001-4025 of 416436