The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112252: Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System: A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management…7.3 High5.5 MediumN/AOct 19, 2026
CVE-2026-112251: antoinersx clawhost: A vulnerability was detected in antoinersx clawhost up to 0.0.454.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112249: grandnode grandnode2: A vulnerability was detected in grandnode grandnode2 up to 2.3.02.4 Low4.8 MediumN/AOct 19, 2026
CVE-2026-110688: Inefficient Algorithmic ComplexityN/AN/AN/AOct 19, 2026
CVE-2026-110687: Improper Handling of Unicode EncodingN/AN/AN/AOct 19, 2026
CVE-2026-110686: Use After FreeN/AN/AN/AOct 19, 2026
CVE-2026-110685: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110684: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110682: Interpretation ConflictN/AN/AN/AOct 19, 2026
CVE-2026-110681: Use After FreeN/AN/AN/AOct 19, 2026
CVE-2026-110680: Out-of-bounds WriteN/AN/AN/AOct 19, 2026
CVE-2026-110678: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 19, 2026
CVE-2026-110677: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110676: Asymmetric Resource Consumption (Amplification)N/AN/AN/AOct 19, 2026
CVE-2026-110675: Improper Validation of Syntactic Correctness of InputN/AN/AN/AOct 19, 2026
CVE-2026-110674: Improper Handling of Unicode EncodingN/AN/AN/AOct 19, 2026
CVE-2026-110673: Uncontrolled RecursionN/AN/AN/AOct 19, 2026
CVE-2026-110672: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-109437: CognicellAI Cognition: Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent…9.8 Critical9.2 CriticalN/AOct 19, 2026
CVE-2026-109434: Fenrir Sleipnir Mobile for Android: Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to…4.3 Medium5.1 MediumN/AOct 19, 2026
CVE-2025-60482: n/a: A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box…N/AN/AN/AOct 19, 2026
CVE-2026-6719: IBM Concert: IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…7.5 HighN/AN/AOct 19, 2026
CVE-2026-55644: element-hq element-x-ios: Element X iOS is a Matrix iOS Client provided by ElementN/A5.1 MediumN/AOct 19, 2026
CVE-2026-4418: IBM Cloud Pak System: IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection5.4 MediumN/AN/AOct 19, 2026
CVE-2026-4413: IBM Concert: IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting6.1 MediumN/AN/AOct 19, 2026
26-50 of 409174
‹›