The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-62347: element-hq element-call: Element Call is a native Matrix video conferencing applicationN/A5.9 MediumN/AOct 30, 2026
CVE-2026-62277: hargata lubelog: LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker6.5 MediumN/AN/AOct 30, 2026
CVE-2026-55614: openwrt uhttpd: uhttpd is a small HTTP serverN/A6.9 MediumN/AOct 30, 2026
CVE-2026-55613: openwrt uhttpd: uhttpd is a small HTTP serverN/A6.9 MediumN/AOct 30, 2026
CVE-2026-55612: openwrt uhttpd: uhttpd is a small HTTP server3.7 LowN/AN/AOct 30, 2026
CVE-2026-55147: aces Loris: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and…6.3 MediumN/AN/AOct 30, 2026
CVE-2026-55146: aces Loris: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-16760: trailofbits fickling: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the…8.8 HighN/AN/AOct 30, 2026
CVE-2026-118938: trailofbits fickling: In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example…8.8 HighN/AN/AOct 30, 2026
CVE-2026-111578: Unknown PDF Invoices & Packing Slips for WooCommerce: The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape…7.5 HighN/AN/AOct 30, 2026
CVE-2026-62991: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel6.5 MediumN/AN/AOct 30, 2026
CVE-2026-62990: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel8.7 HighN/AN/AOct 30, 2026
CVE-2026-62989: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel8.1 HighN/AN/AOct 30, 2026
CVE-2026-62979: roziscoding jack: jack lets users share media libraries through their Radarr/Sonarr stack, peer-to-peerN/A8.4 HighN/AOct 30, 2026
CVE-2026-62968: arsmotorin dreamdisplays: Dream Displays provides in-game screens for streaming videos in MinecraftN/A8.7 HighN/AOct 30, 2026
CVE-2026-62967: sinamics ztnet: ZTNET is a ZeroTier web UI for private controllers with multiuser and organization support8.1 HighN/AN/AOct 30, 2026
CVE-2026-62966: ESP32Async ESPAsyncWebServer: ESPAsyncWebServer is an asynchronous HTTP and WebSocket server library for ESP32, ESP8266, RP2040 and RP23507.5 HighN/AN/AOct 30, 2026
CVE-2026-62965: sabnzbd: SABnzbd is an open source automated Usenet download toolN/A7.0 HighN/AOct 30, 2026
CVE-2026-62958: libriscv: libriscv is a RISC-V sandbox and emulator7.9 HighN/AN/AOct 30, 2026
CVE-2026-62864: ring-clojure ring: Ring is a Clojure web applications library inspired by Python's WSGI and Ruby's Rack7.5 HighN/AN/AOct 30, 2026
CVE-2026-62863: gojue moling: MoLing is a computer-use and browser-use based MCP server9.6 CriticalN/AN/AOct 30, 2026
CVE-2026-62860: Zoeille picsou-finance: Picsou is a self-hosted personal finance dashboard5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62853: mqttsnet thinglinks: ThingLinks is an enterprise IoT platform9.9 CriticalN/AN/AOct 30, 2026
CVE-2026-62849: mqttsnet thinglinks: ThingLinks is an enterprise IoT platform9.1 CriticalN/AN/AOct 30, 2026
CVE-2026-62848: Metalama: Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#7.3 HighN/AN/AOct 30, 2026
26-50 of 418318