The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105998: Unknown Booking Package: The Booking Package WordPress plugin before 1.7.31 does not perform any authorization or validity check before…5.3 MediumN/AN/AOct 21, 2026
CVE-2026-105996: Unknown Booking Package: The Booking Package WordPress plugin before 1.7.31 does not generate booking cancellation tokens using a secure source…4.8 MediumN/AN/AOct 21, 2026
CVE-2026-105992: Unknown Ettrick Escape Room Booking: The Ettrick Escape Room Booking WordPress plugin before 1.3.1 does not verify a booking's payment status against the…5.3 MediumN/AN/AOct 21, 2026
CVE-2026-105262: Unknown Falang multilanguage for WordPress: The Falang multilanguage for WordPress plugin before 1.4.6 does not perform a capability check when saving term…8.0 HighN/AN/AOct 21, 2026
CVE-2026-105257: Unknown Appointment Booking Plugin: The Appointment Booking Plugin WordPress plugin before 5.7.5 does not verify that an authenticated agent-level user is…2.7 LowN/AN/AOct 21, 2026
CVE-2026-103302: Unknown Payment Gateway for Idram: The Payment Gateway for Idram WordPress plugin before 2.1.6 does not verify the authenticity of incoming payment…5.3 MediumN/AN/AOct 21, 2026
CVE-2026-102499: Unknown: The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before…7.7 HighN/AN/AOct 21, 2026
CVE-2026-100145: Unknown Synchrony Financing: The Synchrony Financing WordPress plugin before 1.1.2 does not properly authorise requests to one of its REST routes…6.5 MediumN/AN/AOct 21, 2026
CVE-2026-82819: Cerberus Cerberus FTP Server: A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a…N/A7.1 HighN/AOct 21, 2026
CVE-2026-92824: Red Hat: A flaw was found in libmodulemd6.2 MediumN/AN/AOct 21, 2026
CVE-2026-92823: Red Hat: A flaw was found in libmodulemd6.2 MediumN/AN/AOct 21, 2026
CVE-2026-92822: Red Hat: A flaw was found in libmodulemd6.2 MediumN/AN/AOct 21, 2026
CVE-2026-114040: DT42 BerryNet: A security vulnerability has been detected in DT42 BerryNet up to 3.10.23.5 Low2.0 LowN/AOct 21, 2026
CVE-2026-114039: projectworlds Advanced Library Management System: A weakness has been identified in projectworlds Advanced Library Management System 1.06.3 Medium2.1 LowN/AOct 21, 2026
CVE-2026-82814: smub, Duplicator: The Duplicator and Duplicator Pro plugins for WordPress are vulnerable to PHP Object Injection in all versions up to,…8.8 HighN/AN/AOct 21, 2026
CVE-2026-113744: Tenda AC19: A security vulnerability has been detected in Tenda AC19 16.03.10.0710.0 Critical9.3 CriticalN/AOct 21, 2026
CVE-2026-113743: Tenstorrent tt-metal: A weakness has been identified in Tenstorrent tt-metal up to 0.80.06.3 Medium2.1 LowN/AOct 21, 2026
CVE-2026-114198: Mandiant FLARE floss: Deserialization of untrusted data in Mandiant FLARE floss releases before 3.2.0 allows arbitrary code execution when a…N/A8.7 HighN/AOct 21, 2026
CVE-2026-114197: Mandiant FLARE capa: Deserialization of untrusted data in Mandiant FLARE capa releases before 10.0.0 allows arbitrary code execution when a…N/A8.7 HighN/AOct 21, 2026
CVE-2026-114119: Best Practice Software Bp Premier: Best Practice Software Bp Premier before 1.14.1.1128 uses a hardcoded Microsoft SQL Server administrative password that…9.8 Critical9.3 CriticalN/AOct 21, 2026
CVE-2026-114118: vyperlang vyper: Vyper 0.3.4 through 0.5.0b1 computes the remaining blueprint size in create_from_blueprint by uint256 subtraction…4.8 Medium6.3 MediumN/AOct 21, 2026
CVE-2026-114117: vyperlang vyper: Vyper 0.3.8 through 0.5.0b1 contains an optimizer miscompilation in which (msg.value | K) or (len(msg.data) | K), where…5.9 Medium8.2 HighN/AOct 21, 2026
CVE-2026-114116: vyperlang vyper: Vyper 0.1.0b1 before 0.1.0b17 and 0.4.1 through 0.5.0b1 builds its source-line table with str.splitlines(), which…5.3 Medium6.0 MediumN/AOct 21, 2026
CVE-2026-114115: vyperlang vyper: Vyper 0.3.8 through 0.5.0b1 contains a compiler miscompilation vulnerability in parse_IfExp that reads nested arrays…3.7 Low6.3 MediumN/AOct 21, 2026
CVE-2026-114114: vyperlang vyper: Vyper 0.1.0b1 before 0.1.0b12, 0.1.0b14, and 0.4.1 through 0.5.0b1 mix character-based line offsets with Python's UTF-8…5.3 Medium6.0 MediumN/AOct 21, 2026
426-450 of 417319
‹›