The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-56835: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system8.3 HighN/A0%Oct 23, 2026
CVE-2026-56834: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system7.5 HighN/A1%Oct 23, 2026
CVE-2026-56833: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system7.5 HighN/A1%Oct 23, 2026
CVE-2026-56832: MervinPraison PraisonAI: PraisonAI is a multi-agent teams system8.8 HighN/A0%Oct 23, 2026
CVE-2026-115727: Fosowl AgenticSeek: AgenticSeek before commit 409840c contains a remote code execution vulnerability because llm_server/app.py hardcodes…8.1 High9.2 Critical1%Oct 23, 2026
CVE-2026-115726: Aider-AI aider: Aider through 0.86.2 contains a command execution vulnerability that allows attackers to run shell commands by…7.8 High8.5 High0%Oct 23, 2026
CVE-2026-115725: chatwoot: Chatwoot before 4.17.0 contains an authorization bypass vulnerability that allows authenticated agent bots to access…4.2 Medium2.3 Low0%Oct 23, 2026
CVE-2026-115724: VideoLAN VLC for Android: VLC for Android before 3.7.2 contains a confused-deputy file overwrite vulnerability in FileUtils.getUri() that trusts…2.9 Low2.1 Low0%Oct 23, 2026
CVE-2026-115723: davenardella snap7: Snap7 through 1.4.3 contains an out-of-bounds write vulnerability in the passive partner that allows a malicious active…7.4 High8.3 High1%Oct 23, 2026
CVE-2026-115722: diegonehab rply: RPly through 1.1.4 contains an improper array index validation vulnerability in ply_read_header_property() that accepts…6.1 Medium6.9 Medium0%Oct 23, 2026
CVE-2026-112904: givanz Vvveb: Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores8.7 HighN/A1%Oct 23, 2026
CVE-2026-111965: Unknown Profile Builder: The Profile Builder WordPress plugin from 4.0.0 to 4.0.4 does not enforce its reCAPTCHA verification on all comment…4.3 MediumN/A0%Oct 23, 2026
CVE-2026-107685: agentjido req_llm: Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path…N/A9.1 Critical0%Oct 23, 2026
CVE-2026-98942: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Build the cid tables privately and…N/AN/A0%Oct 23, 2026
CVE-2026-98937: Linux: In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel…N/AN/A0%Oct 23, 2026
CVE-2026-98926: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Remove sink usage from DPMS [Why]…N/AN/A0%Oct 23, 2026
CVE-2026-98917: Linux: In the Linux kernel, the following vulnerability has been resolved: parisc: Increase kernel stack size to 32kb For…N/AN/A0%Oct 23, 2026
CVE-2026-98916: Linux: In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing for color…N/AN/A0%Oct 23, 2026
CVE-2026-98915: Linux: In the Linux kernel, the following vulnerability has been resolved: media: video-i2c: use vb2_video_unregister_device…N/AN/A0%Oct 23, 2026
CVE-2026-98914: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: cap ATOM command table nesting depth…N/AN/A0%Oct 23, 2026
CVE-2026-98913: Linux: In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in…N/AN/A0%Oct 23, 2026
CVE-2026-98912: Linux: In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: oss: Reject reads that cannot fit the…N/AN/A0%Oct 23, 2026
CVE-2026-98911: Linux: In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix the error path in…7.5 HighN/A0%Oct 23, 2026
CVE-2026-98910: Linux: In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Unwind debug trap enable on…N/AN/A0%Oct 23, 2026
CVE-2026-98909: Linux: In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port…N/AN/A0%Oct 23, 2026
601-625 of 537999
‹›