The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-97254: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-4316: Cross-site Scripting (XSS)N/A5.1 MediumN/AOct 26, 2026
CVE-2026-116255: Path Traversal5.3 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116254: Insufficient Verification of Data Authenticity6.5 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116253: A vulnerability was determined in DedeCMS 5.7.1187.3 High6.9 MediumN/AOct 26, 2026
CVE-2026-116237: A vulnerability was found in Oray Pugongying X5 Pro 7.6.18.4 High8.5 HighN/AOct 26, 2026
CVE-2026-115958: Missing Authorization5.3 MediumN/AN/AOct 26, 2026
CVE-2026-115949: Missing Authorization6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115614: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/AN/AOct 26, 2026
CVE-2026-115613: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115602: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-114709: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-112865: Cross-site Scripting (XSS)6.5 MediumN/AN/AOct 26, 2026
CVE-2026-112250: Insertion of Sensitive Information into Log File4.4 MediumN/AN/AOct 26, 2026
CVE-2026-110377: Missing Authorization5.3 MediumN/AN/AOct 26, 2026
CVE-2026-103377: Cross-site Scripting (XSS)N/A5.1 MediumN/AOct 26, 2026
CVE-2026-95664: Improper Neutralization of Special Elements used in an Expression Language Statement5.4 MediumN/AN/AOct 26, 2026
CVE-2026-95663: Insufficient Session Expiration vulnerability in Apache Camel Keycloak component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-95629: Path Traversal5.4 MediumN/AN/AOct 26, 2026
CVE-2026-95628: Path Traversal5.4 MediumN/AN/AOct 26, 2026
CVE-2026-82947: Out-of-bounds Read7.1 HighN/AN/AOct 26, 2026
CVE-2026-82946: NULL Pointer Dereference6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82945: Buffer Copy without Checking Size of Input6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82944: Buffer Copy without Checking Size of Input8.8 HighN/AN/AOct 26, 2026
CVE-2026-82943: Out-of-bounds Read6.5 MediumN/AN/AOct 26, 2026
26-50 of 546512
‹›