The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105926: Apache Software Foundation Apache Pulsar: The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for…N/A5.3 Medium0%Oct 21, 2026
CVE-2026-105869: Apache Software Foundation Apache Pulsar: Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON…N/A9.2 Critical0%Oct 21, 2026
CVE-2026-113461: Checkmk GmbH Checkmk: Local privilege escalation in Checkmk 2.5.0p14 allows a local user with write access to the Oracle client library…N/A5.2 Medium0%Oct 21, 2026
CVE-2026-76481: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…7.5 HighN/A0%Oct 21, 2026
CVE-2026-53986: Girafit Girafit camera app: Girafit camera app (Android and iOS) version 1.9.1 and earlier, and Girafit camera devices, contain a hardcoded…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114261: MomoTommy file-management-system: A vulnerability was found in MomoTommy file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df7.3 High5.5 Medium1%Oct 21, 2026
CVE-2026-114260: oretnom23 file-management-system-php: A vulnerability has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e46.5 Medium5.5 Medium0%Oct 21, 2026
CVE-2026-114259: oretnom23 file-management-system-php: A flaw has been found in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e47.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114258: oretnom23 file-management-system-php: A vulnerability was detected in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e47.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114123: dynamics365ninja d365fo-mcp-server: D365 F&O MCP Server is a Model Context Protocol server for querying Dynamics 365 Finance & Operations X++ code and…7.5 HighN/A0%Oct 21, 2026
CVE-2026-114122: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.9 LowN/A0%Oct 21, 2026
CVE-2026-114121: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113800: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113799: abdolence slack-morphism-rust: Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit5.3 MediumN/A0%Oct 21, 2026
CVE-2026-113798: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113797: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.1 LowN/A0%Oct 21, 2026
CVE-2026-113796: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS4.2 MediumN/A0%Oct 21, 2026
CVE-2026-92183: GIMP: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92209: NoMachine: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92208: NoMachine: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 HighN/A1%Oct 21, 2026
CVE-2026-111184: NoMachine: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-111183: GStreamer: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 21, 2026
CVE-2026-76497: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…6.6 MediumN/A0%Oct 21, 2026
CVE-2026-76505: Cisco Cisco IOS XR Software: A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76524: Cisco Cisco Open Source Snort3: A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated,…7.8 HighN/A0%Oct 21, 2026
651-675 of 418797
‹›