The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-106162: Improper Neutralization of Script-Related HTML Tags4.7 MediumN/AN/AOct 15, 2026
CVE-2026-106161: Improper Neutralization of Script-Related HTML Tags5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106160: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106159: Improper Neutralization of Script-Related HTML Tags4.7 MediumN/AN/AOct 15, 2026
CVE-2026-106158: Improper Neutralization of Script-Related HTML Tags4.7 MediumN/AN/AOct 15, 2026
CVE-2026-106157: Improper Neutralization of Script-Related HTML Tags4.7 MediumN/AN/AOct 15, 2026
CVE-2026-106148: Improper Neutralization of Script-Related HTML Tags5.4 MediumN/AN/AOct 15, 2026
CVE-2026-106147: Improper Neutralization of Script-Related HTML Tags5.4 MediumN/AN/AOct 15, 2026
CVE-2026-102469: Deserialization of Untrusted DataN/A9.2 CriticalN/AOct 15, 2026
CVE-2026-102463: Memory Allocation with Excessive Size ValueN/A8.2 HighN/AOct 15, 2026
CVE-2026-0316: Palo Alto Networks: A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious…N/A1.1 LowN/AOct 14, 2026
CVE-2026-54703: shd101wyy vscode-markdown-preview-enhanced: Markdown Preview Enhanced is a Markdown preview extension for Visual Studio CodeN/A5.8 MediumN/AOct 14, 2026
CVE-2026-54702: shd101wyy vscode-markdown-preview-enhanced: Markdown Preview Enhanced is a Markdown preview extension for Visual Studio CodeN/A7.3 HighN/AOct 14, 2026
CVE-2026-110763: zuihou lamp-boot: lamp-boot 4.16.0-java17 through 4.21.2-java17 contains an insecure direct object reference vulnerability in the oauth…4.3 Medium5.3 MediumN/AOct 14, 2026
CVE-2026-103974: lichess-org lila: lichess.org is the forever free, adless and open source chess server5.4 MediumN/AN/AOct 14, 2026
CVE-2026-102756: dataease: DataEase is an open source data visualization and analysis toolN/A5.1 MediumN/AOct 14, 2026
CVE-2026-102755: dataease: DataEase is an open source data visualization and analysis toolN/A5.1 MediumN/AOct 14, 2026
CVE-2026-108395: modelcontextprotocol: The Model Context Protocol Java SDK is the official Java SDK for Model Context Protocol servers and clients7.5 HighN/AN/AOct 14, 2026
CVE-2026-110715: Artifex Software MuJS: MuJS 1.3.6 before 1.3.9 contains a heap out-of-bounds read and write vulnerability in Array.prototype.sort that allows…6.1 Medium6.9 MediumN/AOct 14, 2026
CVE-2026-101897: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A5.1 MediumN/AOct 14, 2026
CVE-2026-101896: angular, @angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A8.2 HighN/AOct 14, 2026
CVE-2026-110608: BizSpring: BizSpring Shop through commit cf22d39daaf1 contains an insecure direct object reference vulnerability in the…5.4 Medium5.3 MediumN/AOct 14, 2026
CVE-2026-110607: BizSpring: BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows…6.5 Medium7.1 HighN/AOct 14, 2026
CVE-2026-101895: angular, @angular/: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A8.7 HighN/AOct 14, 2026
CVE-2026-101025: F5 NGINX JavaScript: Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context…5.3 Medium6.9 MediumN/AOct 14, 2026
26-50 of 16382
‹›