The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114395: polonel trudesk: Trudesk through 1.2.11 contains an authorization bypass vulnerability in apiMessages.send that allows authenticated…4.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114394: polonel trudesk: Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to post content…4.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114393: polonel trudesk: Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to modify…4.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114392: polonel trudesk: Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows authenticated users to read tickets…4.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114391: easysoft zentaopms: ZenTao PMS before 22.3 contains an authorization bypass vulnerability in commonModel::isOpenMethod() that lets…7.1 High7.1 High0%Oct 21, 2026
CVE-2026-114390: chamilo chamilo-lms: Chamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114389: chamilo chamilo-lms: Chamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in…4.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114388: chamilo chamilo-lms: Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114387: shopperlabs shopper: Shopper from 2.0.0 before 2.6.0 contains a missing authorization vulnerability that allows admin-panel users holding…8.8 High8.7 High0%Oct 21, 2026
CVE-2026-114386: pydantic pydantic-ai-harness: Pydantic AI Harness before 0.59.0 fails to enforce UsageLimits.tool_calls_limit on nested tool calls dispatched from…4.8 Medium6.3 Medium0%Oct 21, 2026
CVE-2026-114248: dhikshitha29 Insurance-Management-System: A security vulnerability has been detected in dhikshitha29 Insurance-Management-System…5.3 Medium5.5 Medium1%Oct 21, 2026
CVE-2026-114245: dhikshitha29 Insurance-Management-System: A weakness has been identified in dhikshitha29 Insurance-Management-System…7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114243: dhikshitha29 Insurance-Management-System: A security flaw has been discovered in dhikshitha29 Insurance-Management-System…7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114120: WPDeveloper SchedulePress: SchedulePress before 5.3.5 contains a missing authorization vulnerability that allows authenticated Contributor-level…5.4 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-111849: Magepeople inc. WpTravelly: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/A0%Oct 21, 2026
CVE-2026-81755: Apache Software Foundation Apache bRPC: Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote…N/AN/A0%Oct 21, 2026
CVE-2026-80463: Apache Software Foundation Apache bRPC: Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms…N/AN/A0%Oct 21, 2026
CVE-2026-79704: Apache Software Foundation Apache bRPC: An out-of-bounds read vulnerability exists in the streaming RPC client of Apache bRPC (versions 1.11.0 through 1.17.0)…N/AN/A0%Oct 21, 2026
CVE-2026-78334: Apache Software Foundation Apache bRPC: Missing authentication in the streaming RPC path of Apache bRPC (version < 1.18.0) on all platforms allows a remote…N/AN/A0%Oct 21, 2026
CVE-2026-78066: Apache Software Foundation Apache bRPC: Resource exhaustion in Apache bRPC (version < 1.18.0) on all platforms: multiple parsers that accept wire-controlled…N/AN/A0%Oct 21, 2026
CVE-2026-78058: Apache Software Foundation Apache bRPC: Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms…N/AN/A0%Oct 21, 2026
CVE-2026-78048: Apache Software Foundation Apache bRPC: A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC…N/AN/A0%Oct 21, 2026
CVE-2026-74758: Apache Software Foundation Apache bRPC: A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to…N/AN/A0%Oct 21, 2026
CVE-2026-74757: Apache Software Foundation Apache bRPC: Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows…N/AN/A0%Oct 21, 2026
CVE-2026-74755: Apache Software Foundation Apache bRPC: An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote…N/AN/A0%Oct 21, 2026
626-650 of 416054
‹›