The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112857: axiomthemes Reprizo: Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112856: ThemeREX Group Vagabonds: Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allows Object Injection.This…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112855: axiomthemes Redy: Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112854: axiomthemes Holistic Center: Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112853: axiomthemes Hallelujah: Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112852: ThemeREX Group Helion: Deserialization of Untrusted Data vulnerability in ThemeREX Group Helion helion allows Object Injection.This issue…8.1 HighN/A0%Oct 23, 2026
CVE-2026-112851: ThemeREX Group HotLock: Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows Object Injection.This issue…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112850: AncoraThemes Your Dress: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability…8.1 HighN/A1%Oct 23, 2026
CVE-2026-112849: AivahThemes Hostme v2: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AivahThemes…7.1 HighN/A0%Oct 23, 2026
CVE-2026-112848: AivahThemes Hostme v2: Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows Object Injection.This issue…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112847: ThemeREX ZenSoul: Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object Injection.This issue affects…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-112846: ThemeREX Group Save Life: Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allows Object Injection.This…9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-99083: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix heap out-of-bounds write in…8.8 HighN/A0%Oct 23, 2026
CVE-2026-99080: Linux: In the Linux kernel, the following vulnerability has been resolved: fs: Free any excess xarray nodes in clear_inode()…N/AN/A0%Oct 23, 2026
CVE-2026-99036: Linux: In the Linux kernel, the following vulnerability has been resolved: dm: fix reading free memory in do_resume When…N/AN/A0%Oct 23, 2026
CVE-2026-98945: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: steam: Rearrange teardown sequence This fixes…7.8 HighN/A0%Oct 23, 2026
CVE-2026-98944: Linux: In the Linux kernel, the following vulnerability has been resolved: HID: steam: Refactor registration This refactors…7.8 HighN/A0%Oct 23, 2026
CVE-2026-98871: Linux: In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Fix possible deadlock in SEV init…N/AN/A0%Oct 23, 2026
CVE-2026-98870: Linux: In the Linux kernel, the following vulnerability has been resolved: ksmbd: remove stale channels from all sessions on…8.8 HighN/A0%Oct 23, 2026
CVE-2026-95620: qt: A use-after-free vulnerability in the Qt QNetworkAccessManager HTTP/2 client support of the Qt Network module allows a…N/A2.1 Low0%Oct 23, 2026
CVE-2026-94263: Unknown: The Advanced Custom Fields: Extended and Advanced Custom Fields: Extended PRO WordPress plugins from 0.9.2.4 to 0.9.2.7…4.8 MediumN/A0%Oct 23, 2026
CVE-2026-56840: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system8.8 HighN/A0%Oct 23, 2026
CVE-2026-56838: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system7.8 HighN/A0%Oct 23, 2026
CVE-2026-56837: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system8.6 HighN/A0%Oct 23, 2026
CVE-2026-56836: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system8.2 HighN/A0%Oct 23, 2026
576-600 of 537999
‹›