The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113792: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A6.0 Medium0%Oct 21, 2026
CVE-2026-113791: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A6.0 Medium0%Oct 21, 2026
CVE-2026-113790: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A6.0 Medium0%Oct 21, 2026
CVE-2026-113789: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A6.0 Medium0%Oct 21, 2026
CVE-2026-113788: uselagoon lagoon: Lagoon is an application delivery platform for KubernetesN/A9.4 Critical0%Oct 21, 2026
CVE-2026-113787: GitHubNewbie0 odf-kit: odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and…6.1 MediumN/A0%Oct 21, 2026
CVE-2026-76489: Cisco: Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-76492: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.5 HighN/A0%Oct 21, 2026
CVE-2026-102536: Rejected reason: This CVE has been rejected because it was issued to a development-only issue with no affected…N/AN/AN/AOct 21, 2026
CVE-2026-102486: ntpsec: Out-of-bounds read in NTS extension field parsing in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to crash…7.5 HighN/A1%Oct 21, 2026
CVE-2026-102485: ntpsec: Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls…5.2 MediumN/A0%Oct 21, 2026
CVE-2026-102484: ntpsec: Heap-based buffer overflow in the JJY refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the…6.4 MediumN/A0%Oct 21, 2026
CVE-2026-102483: ntpsec: Reachable exit in NTPsec ntpd 1.1.4 through 1.2.5 allows a remote attacker to terminate the daemon via an NTS request…7.5 HighN/A1%Oct 21, 2026
CVE-2026-76491: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76487: Cisco Cisco Unified Communications Manager: A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session…5.3 MediumN/A1%Oct 21, 2026
CVE-2026-76479: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…7.8 HighN/A0%Oct 21, 2026
CVE-2026-76478: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76476: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76477: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76475: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…9.3 CriticalN/A0%Oct 21, 2026
CVE-2026-76474: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…9.8 CriticalN/A0%Oct 21, 2026
CVE-2026-76445: Cisco: Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an…5.3 MediumN/A0%Oct 21, 2026
CVE-2026-76473: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency…9.8 CriticalN/A0%Oct 21, 2026
CVE-2026-76435: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: A vulnerability in Cisco Expressway Series could allow an unauthenticated, remote attacker to obtain sensitive…5.3 MediumN/A0%Oct 21, 2026
CVE-2026-20356: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…7.5 HighN/A0%Oct 21, 2026
701-725 of 416054
‹›