The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111373: FreeRDP: FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a…5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111237: Ultralytics FastSAM: A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b525.3 Medium4.8 Medium0%Oct 16, 2026
CVE-2026-111212: ImprintLab Medical-SAM-Adapter: A security flaw has been discovered in ImprintLab Medical-SAM-Adapter 0.1.0-alpha/0.1.04.8 Medium0.9 Low0%Oct 16, 2026
CVE-2026-109813: Moxa AIG-302 Series: A hard-coded cryptographic key vulnerability exists in the `/usr/bin/sysman` of some of Moxa's industrial computing…N/A8.6 High0%Oct 16, 2026
CVE-2026-109812: Moxa AIG-302 Series: A missing authorization vulnerability exists in the internal API `/api/v1/secrets/` of some of Moxa's industrial…N/A6.9 Medium0%Oct 16, 2026
CVE-2026-105228: Deltaww ISPSoft: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.N/A7.0 High0%Oct 16, 2026
CVE-2026-105227: Deltaww ISPSoft: This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.N/A7.0 High0%Oct 16, 2026
CVE-2026-100159: ays-pro: The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.24.8 MediumN/A0%Oct 16, 2026
CVE-2026-92777: Lenovo: A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an…6.4 Medium5.4 Medium0%Oct 16, 2026
CVE-2026-92629: Lenovo Baiying PC Client: A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in…7.3 High7.0 High0%Oct 16, 2026
CVE-2026-89062: Lenovo Energy Management Driver: A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a…5.5 Medium6.8 Medium0%Oct 16, 2026
CVE-2026-89057: Lenovo: A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with…6.8 Medium7.0 High0%Oct 16, 2026
CVE-2026-84823: Red Hat: A flaw was found in WildFly7.1 HighN/A0%Oct 16, 2026
CVE-2026-75941: Lenovo Legion Zone Application: A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese…8.0 High8.6 High0%Oct 16, 2026
CVE-2026-16755: Lenovo: A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that…5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-16754: Lenovo: A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed…4.8 Medium5.9 Medium0%Oct 16, 2026
CVE-2026-111210: n/a bitcoinj: A vulnerability was determined in bitcoinj up to 0.177.3 High5.5 Medium0%Oct 16, 2026
CVE-2025-55653: n/a: GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_parse_lfrac function (utils/error.c)N/AN/AN/AOct 16, 2026
CVE-2026-8311: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2026-5819: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2026-2937: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2026-107316: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2026-107172: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2025-3778: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 15, 2026
CVE-2026-96806: Apache Software Foundation Apache Airflow Keycloak provider: The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented…5.8 MediumN/A0%Oct 15, 2026
551-575 of 408260
‹›