The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111351: metasfresh: metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows…4.2 Medium2.3 Low0%Oct 15, 2026
CVE-2026-111350: Papermark: Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows…5.0 Medium2.3 Low0%Oct 15, 2026
CVE-2026-111349: puemos Craftplan: Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows…5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111348: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111347: opsre go-ldap-admin: go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects…5.9 Medium8.2 High0%Oct 15, 2026
CVE-2026-111346: easysoft zentaopms: ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated…5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111345: polonel trudesk: Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read…4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111344: apitable: APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read…4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111343: Missing Authorization4.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111332: Incorrect Authorization3.7 Low6.3 Medium0%Oct 15, 2026
CVE-2026-111331: Dokploy: Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows…6.3 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111330: JuggleIM: JuggleIM im-server through 1.8.16 contains a weak password hashing vulnerability that stores admin console passwords as…5.9 Medium8.2 High0%Oct 15, 2026
CVE-2026-111329: JuggleIM: JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated…9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111324: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111323: samugit83 RedAmon: RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST…5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111322: coleam00 Archon: Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111321: TaskingAI: TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to…5.4 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-111320: ValueCell-ai ValueCell: ValueCell through 0.1.20 contains an unauthenticated server-side request forgery vulnerability that allows remote…6.5 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111313: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Oct 15, 2026
CVE-2026-111312: Missing Authentication for Critical Function7.7 High9.2 Critical0%Oct 15, 2026
CVE-2026-111284: Webkul Aureus ERP: Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows…5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-111283: BMC Helix BMC Helix Network Management: BMC Helix Network Management on-prem before 26.3.01 contains an authentication bypass vulnerability that allows…9.0 Critical9.5 Critical0%Oct 15, 2026
CVE-2026-111282: driftregion iso14229: Driftregion iso14229 before 0.10.1 contains an integer wraparound in Handle_0x38_RequestFileTransfer that lets…8.2 High8.8 High0%Oct 15, 2026
CVE-2026-111281: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111280: Out-of-bounds Write7.4 High8.3 High0%Oct 15, 2026
601-625 of 513998
‹›