The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111343: Missing Authorization4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111332: Incorrect Authorization3.7 Low6.3 Medium0%Oct 15, 2026
CVE-2026-111331: Dokploy: Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows…6.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111330: JuggleIM: JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as…5.9 Medium8.2 High0%Oct 15, 2026
CVE-2026-111329: JuggleIM: JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated…9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111324: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111323: samugit83 RedAmon: RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST…5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111322: coleam00 Archon: Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111321: TaskingAI: TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to…5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111320: ValueCell-ai ValueCell: ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote…6.5 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111313: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Oct 15, 2026
CVE-2026-111312: Missing Authentication for Critical Function7.7 High9.2 Critical0%Oct 15, 2026
CVE-2026-111284: Webkul Aureus ERP: Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows…5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-111283: BMC Helix BMC Helix Network Management: BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows…9.0 Critical9.5 Critical0%Oct 15, 2026
CVE-2026-111282: driftregion iso14229: Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets…8.2 High8.8 High0%Oct 15, 2026
CVE-2026-111281: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111280: Out-of-bounds Write7.4 High8.3 High0%Oct 15, 2026
CVE-2026-111279: dragonflydb dragonfly: Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to…7.5 High8.7 High0%Oct 15, 2026
CVE-2026-111278: nivocart: NivoCart through 2.5.1 contains a CAPTCHA bypass vulnerability that allows unauthenticated attackers to defeat form…5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111277: nivocart: NivoCart through 2.5.1 contains a missing authorization vulnerability in the download() action of account/order that…7.5 High8.7 High0%Oct 15, 2026
CVE-2026-111275: Out-of-bounds Write6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111274: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111273: selmf unarr: unarr through 1.1.1 contains an off-by-one heap-based buffer overflow in tar_get_name() in tar/parse-tar.c, reachable…6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111272: LibRaw: LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers…5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111271: Konstanty Bialkowski libmodplug: libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in…5.5 Medium6.8 Medium0%Oct 15, 2026
601-625 of 408260
‹›