The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109207: themeisle: The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress…7.2 HighN/A0%Oct 16, 2026
CVE-2026-107758: extendthemes Colibri Page Builder: The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter…7.2 HighN/A0%Oct 16, 2026
CVE-2026-104769: asadkn: The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions…5.9 MediumN/A1%Oct 16, 2026
CVE-2026-104745: wpcodefactory Customer Email Verification for WooCommerce: The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the…8.1 HighN/A1%Oct 16, 2026
CVE-2026-103518: wpmanageninja: The FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler plugin for WordPress is vulnerable to generic SQL…4.9 MediumN/A0%Oct 16, 2026
CVE-2026-111389: SQL Injection7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111388: frappe: Frappe Framework before 15.120.0 and 16.x before 16.33.0 does not enforce the per-user restrict_ip allowlist for…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111387: nezhahq nezha: Nezha from 2.2.5 before 2.3.15 contains an information disclosure vulnerability that allows authenticated users to…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111386: nezhahq nezha: Nezha from 1.7.0 before 2.3.15 contains an information disclosure vulnerability that allows authenticated members to…4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111385: URL Redirection to Untrusted Site ('Open Redirect')4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-111384: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111383: nezhahq nezha: Nezha from 2.0.13 before 2.3.15 contains a resource exhaustion vulnerability that allows authenticated users to open…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111382: FreeRDP: FreeRDP before 3.32.0 contains a client-side heap out-of-bounds write vulnerability in general_LumaToYUV444 and…8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111381: FreeRDP: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v2 that allows local…7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111380: Integer Overflow or Wraparound8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111379: FreeRDP: FreeRDP before 3.32.0 contains a heap buffer overflow vulnerability in persistent_cache_read_entry_v3 that allows local…7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111378: FreeRDP: FreeRDP from 3.0.0 before 3.32.0 contains an uncontrolled resource consumption vulnerability in parse_nla_mode_pdu that…7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111377: FreeRDP: FreeRDP from 2.0.0 before 3.32.0 contains an unbounded reassembly vulnerability in WTSProcessChannelData that fails to…6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111376: FreeRDP: FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's…5.0 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111375: Out-of-bounds Read4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-111374: FreeRDP: FreeRDP from 3.30.0 before 3.32.0 contains a resource exhaustion vulnerability in the rdpecam client that lets…5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-111373: FreeRDP: FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a…5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111237: Ultralytics FastSAM: A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b525.3 Medium4.8 Medium0%Oct 16, 2026
CVE-2026-111212: ImprintLab Medical-SAM-Adapter: A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.04.8 Medium0.9 Low0%Oct 16, 2026
CVE-2026-109813: Moxa AIG-302 Series: A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing…N/A8.6 High0%Oct 16, 2026
476-500 of 412906
‹›