The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-115517: KNIME KNIME Business Hub: Unrestricted network access between execution contexts in KNIME Business Hub before version 1.19.0 allows an…N/A6.4 Medium0%Oct 22, 2026
CVE-2026-115414: AWS aws-sam-cli: OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the…7.8 High8.4 High1%Oct 22, 2026
CVE-2026-115397: NationalSecurityAgency ghidra: Ghidra before 12.2 contains a resource allocation without limits vulnerability in…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115396: NationalSecurityAgency ghidra: Ghidra 10.3 before 12.2 contains an improper handling of highly compressed data vulnerability in…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115395: NationalSecurityAgency ghidra: Ghidra 10.3 before 12.2 contains a resource allocation without limits vulnerability in ThemeReader.readZipTheme() that…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115394: NationalSecurityAgency ghidra: Ghidra through 12.2 contains an uncontrolled memory allocation vulnerability in BinaryField.read() that allows…5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115393: bytecodealliance wasmtime: Wasmtime before 24.0.12, 25.0.0 before 36.0.13, 37.0.0 before 46.0.2, and 47.0.0 before 47.0.3 contains a type…3.8 Low1.0 Low0%Oct 22, 2026
CVE-2026-115392: bytecodealliance wasmtime: Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesystem…7.9 High8.8 High0%Oct 22, 2026
CVE-2026-115391: bytecodealliance wasmtime: Wasmtime 46.0.0 before 46.0.3 and 47.0.0 before 47.0.4 contains an uncontrolled resource allocation vulnerability in…5.8 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115390: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 contains a fuel accounting flaw in Cranelift-compiled call_ref…5.7 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115389: bytecodealliance wasmtime: Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not adequately account for host…2.3 Low1.0 Low0%Oct 22, 2026
CVE-2026-115388: bytecodealliance wasmtime: wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the…6.2 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115387: bytecodealliance wasmtime: Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in…6.2 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115386: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure…2.6 Low2.1 Low0%Oct 22, 2026
CVE-2026-115385: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi…6.2 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115384: bytecodealliance wasmtime: Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows…9.9 Critical9.4 Critical0%Oct 22, 2026
CVE-2026-115383: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts…4.8 Medium5.9 Medium0%Oct 22, 2026
CVE-2026-115382: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http…4.8 Medium5.9 Medium0%Oct 22, 2026
CVE-2026-115381: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the…4.8 Medium5.9 Medium0%Oct 22, 2026
CVE-2026-115380: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in…4.0 Medium5.1 Medium0%Oct 22, 2026
CVE-2026-115379: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves…5.7 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115378: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in…5.8 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-115377: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that…9.9 Critical9.4 Critical0%Oct 22, 2026
CVE-2026-115376: lxc incus: Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…7.7 High8.3 High0%Oct 22, 2026
CVE-2026-115375: lxc incus: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to…9.9 Critical9.4 Critical0%Oct 22, 2026
601-625 of 413119
‹›