The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76496: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.0 HighN/A0%Oct 21, 2026
CVE-2026-76495: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.8 HighN/A0%Oct 21, 2026
CVE-2026-76494: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.8 HighN/A0%Oct 21, 2026
CVE-2026-114490: Progressive Robot Ltd hMailServer: Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an…7.8 HighN/A0%Oct 21, 2026
CVE-2026-114489: Progressive Robot Ltd hMailServer: Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6…8.1 HighN/A0%Oct 21, 2026
CVE-2026-114479: Progressive Robot Ltd hMailServer: Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-114478: Progressive Robot Ltd hMailServer: Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6…5.9 MediumN/A0%Oct 21, 2026
CVE-2026-114477: Progressive Robot Ltd hMailServer: Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-114476: Progressive Robot Ltd hMailServer: Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a…7.5 HighN/A0%Oct 21, 2026
CVE-2026-114475: Progressive Robot Ltd hMailServer: Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114474: Progressive Robot Ltd hMailServer: Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer…5.9 MediumN/A0%Oct 21, 2026
CVE-2026-114473: Progressive Robot Ltd hMailServer: Incorrect authorization in the Sender Rewriting Scheme (SRS) of Progressive Robot hMailServer 6.2.1 through 6.3.6…5.0 MediumN/A0%Oct 21, 2026
CVE-2026-114472: Progressive Robot Ltd hMailServer: Insufficient resource pool in the ACME HTTP-01 challenge responder of Progressive Robot hMailServer 6.0.0 through 6.3.6…3.7 LowN/A0%Oct 21, 2026
CVE-2026-114471: Progressive Robot Ltd hMailServer: Insertion of sensitive information into a log file in the SMTP server of Progressive Robot hMailServer 6.0.0 through…4.7 MediumN/A0%Oct 21, 2026
CVE-2026-76493: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.5 HighN/A0%Oct 21, 2026
CVE-2026-114470: Progressive Robot Ltd hMailServer: Cross-site request forgery in the REST API of Progressive Robot hMailServer 6.0.0 through 6.3.6 allows a remote…5.3 MediumN/A0%Oct 21, 2026
CVE-2026-114463: Nous Research Hermes Agent: The webhook platform gateway in Nous Research Hermes Agent versions builds the session chat_id as…N/AN/A0%Oct 21, 2026
CVE-2026-114462: Velneo vServer: Improper link resolution before file access ('link following') vulnerability in Velneo vServerN/A6.0 Medium0%Oct 21, 2026
CVE-2026-114370: Red Hat: A flaw was found in the PathResourceManager component of the Undertow web server3.7 LowN/A0%Oct 21, 2026
CVE-2026-114257: oretnom23 file-management-system-php: A security vulnerability has been detected in oretnom23 file-management-system-php up to…7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114256: oretnom23 file-management-system-php: A weakness has been identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e47.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114255: oretnom23 file-management-system-php: A security flaw has been discovered in oretnom23 file-management-system-php up to…7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114254: oretnom23 file-management-system-php: A vulnerability was identified in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e47.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114253: oretnom23 file-management-system-php: A vulnerability was determined in oretnom23 file-management-system-php up to 2e3c1ebe60f121e8df4fb3f544f0e9591d9a01e46.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-76490: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…8.6 HighN/A0%Oct 21, 2026
676-700 of 418797
‹›