The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117516: oretnom23 php-travel-agency-system: A weakness has been identified in oretnom23 php-travel-agency-system7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-117515: oretnom23 php-travel-agency-system: A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e06357.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-116682: gtsteffaniak filebrowser: FileBrowser Quantum is a free, self-hosted, web-based file manager8.6 HighN/AN/AOct 27, 2026
CVE-2026-116680: sysadminsmedia homebox: HomeBox is a home inventory and organization system6.4 MediumN/AN/AOct 27, 2026
CVE-2026-116679: m1k1o neko: Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC5.4 MediumN/AN/AOct 27, 2026
CVE-2026-116678: dani-garcia vaultwarden: Vaultwarden is a Bitwarden-compatible server written in Rust5.8 MediumN/AN/AOct 27, 2026
CVE-2026-116677: openwisp openwisp-controller: OpenWISP Controller is a network and WiFi controller for provisioning, configuration management, updates, and PKI…N/A5.3 MediumN/AOct 27, 2026
CVE-2026-116676: runatlantis atlantis: Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks8.8 HighN/AN/AOct 27, 2026
CVE-2026-116662: Tanium Enforce: Tanium addressed a compression bomb vulnerability in Enforce.7.5 HighN/AN/AOct 27, 2026
CVE-2026-116660: Tanium Enforce: Tanium addressed an improper access controls vulnerability in Enforce.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116659: Tanium Enforce: Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116658: Tanium Enforce: Tanium addressed a denial of service vulnerability in Enforce.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116657: Tanium Enforce: Tanium addressed a denial of service vulnerability in Enforce.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-116656: Tanium Enforce: Tanium addressed an uncontrolled resource consumption vulnerability in Enforce.7.5 HighN/AN/AOct 27, 2026
CVE-2026-116649: Tanium Enforce: Tanium addressed an improper output sanitization vulnerability in Enforce.7.1 HighN/AN/AOct 27, 2026
CVE-2026-116647: Tanium Comply: Tanium addressed an improper output sanitization vulnerability in Comply.7.1 HighN/AN/AOct 27, 2026
CVE-2026-111054: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBERN/AN/AN/AOct 27, 2026
CVE-2026-108333: Tanium: Tanium addressed a use-after-free vulnerability in Threat Response Client Extension.2.5 LowN/AN/AOct 27, 2026
CVE-2026-108332: Tanium: Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.6.3 MediumN/AN/AOct 27, 2026
CVE-2026-108331: Tanium: Tanium addressed an infinite loop vulnerability in Threat Response Client Extension.3.3 LowN/AN/AOct 27, 2026
CVE-2026-108330: Tanium: Tanium addressed an information disclosure vulnerability in Threat Response Client Extension.3.6 LowN/AN/AOct 27, 2026
CVE-2026-108329: Tanium Threat Response: Tanium addressed an unauthorized code execution vulnerability in Threat Response.8.8 HighN/AN/AOct 27, 2026
CVE-2026-108328: Tanium Threat Response: Tanium addressed an insertion of sensitive information into log file vulnerability in Threat Response.4.2 MediumN/AN/AOct 27, 2026
CVE-2026-108326: Tanium: Tanium addressed an improper certificate validation vulnerability in Stream Client Extension.6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108325: Tanium Reputation: Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation.6.6 MediumN/AN/AOct 27, 2026
51-75 of 522616