The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107037: n/a: Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized…N/AN/AN/AOct 29, 2026
CVE-2026-86983: Apple swift-crypto: A remote attacker may be able to terminate a process that passes attacker-controlled input to the P-384 VOPRF API…N/AN/AN/AOct 28, 2026
CVE-2026-85749: MailWatch: MailWatch for MailScanner is a web-based front-end to MailScanner8.1 HighN/AN/AOct 28, 2026
CVE-2026-82411: maykinmedia open-object: Open Object provides an API and admin interface to manage objects and object types6.5 MediumN/AN/AOct 28, 2026
CVE-2026-75520: domoticz: Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi5.4 MediumN/AN/AOct 28, 2026
CVE-2026-55561: InvoicePlane: InvoicePlane is a self-hosted open source application for managing invoices, clients, and paymentsN/A5.3 MediumN/AOct 28, 2026
CVE-2026-118579: D-Link DIR-505: A weakness has been identified in D-Link DIR-505 1.10B029.8 Critical8.9 HighN/AOct 28, 2026
CVE-2026-118578: maotoumao MusicFreeDesktop: A security flaw has been discovered in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.84.3 Medium2.1 LowN/AOct 28, 2026
CVE-2026-118577: maotoumao MusicFreeDesktop: A vulnerability was identified in maotoumao MusicFreeDesktop 0.0.6/0.0.7/0.0.86.3 Medium2.1 LowN/AOct 28, 2026
CVE-2026-111575: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 28, 2026
CVE-2026-111486: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 28, 2026
CVE-2026-111478: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 28, 2026
CVE-2026-93851: Mattermost: Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the…8.0 HighN/AN/AOct 28, 2026
CVE-2026-61575: WWBN AVideo-Encoder: AVideo is a video-sharing Platform4.7 MediumN/AN/AOct 28, 2026
CVE-2026-61573: WWBN AVideo-Encoder: AVideo is a video-sharing Platform6.1 MediumN/AN/AOct 28, 2026
CVE-2026-61572: WWBN AVideo-Encoder: AVideo is a video-sharing Platform8.6 HighN/AN/AOct 28, 2026
CVE-2026-61571: WWBN AVideo-Encoder: AVideo is a video-sharing Platform7.3 HighN/AN/AOct 28, 2026
CVE-2026-61569: WWBN AVideo-Encoder: AVideo is a video-sharing Platform7.5 HighN/AN/AOct 28, 2026
CVE-2026-61567: WWBN AVideo-Encoder: AVideo is a video-sharing Platform10.0 CriticalN/AN/AOct 28, 2026
CVE-2026-61564: WWBN AVideo-Encoder: AVideo is a video-sharing Platform10.0 CriticalN/AN/AOct 28, 2026
CVE-2026-61546: ankimcp anki-mcp-server-addon: AnkiMCP is an Anki addon that implements an MCP server, enabling AI assistants to interact with the Anki flashcard…N/A8.8 HighN/AOct 28, 2026
CVE-2026-57448: mrblomblo blombooru: Blombooru is a self-hosted personal booru for organizing and tagging private image collectionsN/A6.2 MediumN/AOct 28, 2026
CVE-2026-54455: OpenCATS: OpenCATS is an open-source applicant tracking system and recruitment CRM for staffing agencies and hiring teams7.6 HighN/AN/AOct 28, 2026
CVE-2026-118804: Bricks Bricks Builder: Bricks Builder 2.4.3 and before contains a broken access control vulnerability that allows unauthenticated attackers to…7.5 HighN/AN/AOct 28, 2026
CVE-2026-118757: PI Websolution PiWeb Disable payment method / Partial payment for WooCommerce: PiWeb Disable payment method / Partial payment for WooCommerce before 1.1.10.9 contains a missing authorization…6.5 Medium6.9 MediumN/AOct 28, 2026
526-550 of 538495