The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116100: n/a gougucms: A vulnerability has been found in gougucms up to 4.08.182.4 Low1.9 LowN/AOct 26, 2026
CVE-2026-116099: Fusion Creators Studio SCP Containment Breach Multiplayer: A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.2956.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116098: SteelRaven7 Ravenfield: A vulnerability was detected in SteelRaven7 Ravenfield 254070736.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116097: n/a CloudClassroom-PHP-Project: A security vulnerability has been detected in CloudClassroom-PHP-Project4.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116096: ggml-org llama.cpp: A weakness has been identified in ggml-org llama.cpp5.3 Medium1.9 LowN/AOct 25, 2026
CVE-2026-116095: smg-project smg: A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.15.3 Medium5.5 MediumN/AOct 25, 2026
CVE-2026-116094: n/a EyouCMS: A vulnerability was determined in EyouCMS up to 1.8.37.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-115635: ash-project ash_postgres: Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to read another tenant's record through…N/A6.0 MediumN/AOct 25, 2026
CVE-2026-115627: ash-project ash_postgres: Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load destination records linked to a…N/A6.0 MediumN/AOct 25, 2026
CVE-2026-114214: ash-project ash: Incorrect Authorization vulnerability in ash-project ash allows a client to read destination records unrelated to the…N/A6.0 MediumN/AOct 25, 2026
CVE-2026-116063: n/a DedeCMS: A weakness has been identified in DedeCMS up to 5.7.1184.7 Medium2.0 LowN/AOct 25, 2026
CVE-2026-116062: SourceCodester Performance Indicator System: A security flaw has been discovered in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-116061: SourceCodester Performance Indicator System: A vulnerability was identified in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-116060: SourceCodester Performance Indicator System: A vulnerability was determined in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-115825: Memory Allocation with Excessive Size ValueN/AN/AN/AOct 25, 2026
CVE-2026-115824: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 25, 2026
CVE-2026-115823: Inconsistent Interpretation of HTTP RequestsN/AN/AN/AOct 25, 2026
CVE-2026-115822: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 25, 2026
CVE-2026-115817: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 25, 2026
CVE-2026-116058: Alfresco Activiti: A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.6926.3 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116057: KodCloud KodExplorer: A vulnerability has been found in KodCloud KodExplorer up to 4.556.3 Medium2.1 LowN/AOct 25, 2026
CVE-2026-116056: KodCloud KodExplorer: A flaw has been found in KodCloud KodExplorer up to 4.566.3 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116055: SourceCodester Performance Indicator System: A vulnerability was detected in SourceCodester Performance Indicator System 1.06.3 Medium2.1 LowN/AOct 25, 2026
CVE-2026-116054: n/a SH3: A security vulnerability has been detected in SH32.2 Low1.2 LowN/AOct 25, 2026
CVE-2026-116211: yeswiki: YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche…8.2 High8.8 HighN/AOct 25, 2026
701-725 of 416032