The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110687: Improper Handling of Unicode EncodingN/AN/AN/AOct 19, 2026
CVE-2026-110686: Use After FreeN/AN/AN/AOct 19, 2026
CVE-2026-110685: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110684: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110682: Interpretation ConflictN/AN/AN/AOct 19, 2026
CVE-2026-110681: Use After FreeN/AN/AN/AOct 19, 2026
CVE-2026-110680: Out-of-bounds WriteN/AN/AN/AOct 19, 2026
CVE-2026-110678: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 19, 2026
CVE-2026-110677: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110676: Asymmetric Resource Consumption (Amplification)N/AN/AN/AOct 19, 2026
CVE-2026-110675: Improper Validation of Syntactic Correctness of InputN/AN/AN/AOct 19, 2026
CVE-2026-110674: Improper Handling of Unicode EncodingN/AN/AN/AOct 19, 2026
CVE-2026-110673: Uncontrolled RecursionN/AN/AN/AOct 19, 2026
CVE-2026-110672: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-109437: CognicellAI Cognition: Cognition before 0.13.0 contains an unauthenticated remote code execution vulnerability due to defaulting its agent…9.8 Critical9.2 CriticalN/AOct 19, 2026
CVE-2026-109434: Fenrir Sleipnir Mobile for Android: Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to…4.3 Medium5.1 MediumN/AOct 19, 2026
CVE-2025-60482: n/a: A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box…N/AN/AN/AOct 19, 2026
CVE-2026-6719: IBM Concert: IBM Concert 1.0 through 3.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to…7.5 HighN/AN/AOct 19, 2026
CVE-2026-55644: element-hq element-x-ios: Element X iOS is a Matrix iOS Client provided by ElementN/A5.1 MediumN/AOct 19, 2026
CVE-2026-4418: IBM Cloud Pak System: IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to HTML injection5.4 MediumN/AN/AOct 19, 2026
CVE-2026-4413: IBM Concert: IBM Concert 1.0 through 3.0.0 is vulnerable to cross-site scripting6.1 MediumN/AN/AOct 19, 2026
CVE-2026-4405: IBM Concert: IBM Concert 1.0 through 3.0.0 allows web page cache to be stored locally which can be read by another user on the…4.0 MediumN/AN/AOct 19, 2026
CVE-2026-3628: IBM Concert: IBM Concert 1.0 through 3.0.0 allows information disclosure through exposure of schema suggestions.5.3 MediumN/AN/AOct 19, 2026
CVE-2026-3303: IBM Concert: IBM Concert 1.0 through 3.0.0 uses cross-origin resource sharing (CORS) which could allow an attacker to carry out…3.7 LowN/AN/AOct 19, 2026
CVE-2026-3295: IBM Cloud Pak System: IBM Cloud Pak System 2.3.6.0, and 2.3.6.1 is vulnerable to cross site scripting7.4 HighN/AN/AOct 19, 2026
51-75 of 409174
‹›