The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111107: WatchGuard Fireware OS: A NULL pointer dereference vulnerability in WatchGuard Fireware OS’s management interface allows a remote,…N/A8.7 HighN/AOct 27, 2026
CVE-2026-109823: tidewave-ai tidewave: An attacker can read the name of filesystem paths of your application present via Tidewave configuration via…N/A2.3 LowN/AOct 27, 2026
CVE-2026-107672: Autodesk Fusion Post Processor Utility: A maliciously crafted .stack.json file can trigger a trusted Markdown injection vulnerability in Autodesk Fusion Post…8.8 HighN/AN/AOct 27, 2026
CVE-2026-107458: Rejected reason: This CVE has been rejected by Upstream, as they failed to create a meaningful exploitN/AN/AN/AOct 27, 2026
CVE-2026-104381: WatchGuard Fireware OS: A missing authentication vulnerability in Fireware OS's FireCluster state synchronization feature allows an…N/A6.0 MediumN/AOct 27, 2026
CVE-2026-104189: maz1987in 3Dviewer-Nextcloud: The 3D Viewer for Nextcloud is a comprehensive 3D model viewer application for Nextcloud that supports multiple 3D file…7.5 HighN/AN/AOct 27, 2026
CVE-2026-103594: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's WireGuard configuration processing allows a remote…N/A9.5 CriticalN/AOct 27, 2026
CVE-2026-103593: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in the Fireware OS logging service allows a network-adjacent attacker who…N/A7.1 HighN/AOct 27, 2026
CVE-2025-64394: Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the…N/A4.3 MediumN/AOct 27, 2026
CVE-2026-108141: Veeam Backup and Replication: A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a…N/A5.9 MediumN/AOct 27, 2026
CVE-2026-106078: Veeam Backup for Microsoft 365: A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token…N/A6.9 MediumN/AOct 27, 2026
CVE-2026-107671: Veeam ONE: A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by…N/A8.5 HighN/AOct 27, 2026
CVE-2026-108142: Veeam Backup and Replication: A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-106077: Veeam Backup for Microsoft 365: A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on…N/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Veeam Backup for Microsoft 365: A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of…N/A9.0 CriticalN/AOct 27, 2026
CVE-2026-108140: Veeam Backup and Replication: A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a…N/A5.9 MediumN/AOct 27, 2026
CVE-2026-105477: Veeam Agent for Linux: A vulnerability in Veeam Agent for Linux allows for local privilege escalationN/A7.3 HighN/AOct 27, 2026
CVE-2026-82984: Nextcloud Server: When a team was configured as "visible to everyone", the web UI correctly blocked non-members from viewing the team…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-77167: Nextcloud server: Abusing the federated share endpoint, an attacker can write arbitrary rows into the oc_share_external database table7.5 HighN/AN/AOct 27, 2026
CVE-2026-77173: Nextcloud Files Confidential: A user could create a docx or odt file with a # in the filename with confidential information such as a credit card…4.3 MediumN/AN/AOct 27, 2026
CVE-2026-67400: Nextcloud Richdocuments: A missing token type check allowed to retrieve more additional information about the WOPI configuration with a user or…3.5 LowN/AN/AOct 27, 2026
CVE-2026-77171: Nextcloud Collectives: A public shared collective always allowed recipients of the link to create pages.3.5 LowN/AN/AOct 27, 2026
CVE-2026-77172: Nextcloud Server: App passwords were allowed to bypass password confirmation on sensitive endpoints.5.3 MediumN/AN/AOct 27, 2026
CVE-2026-87897: Nextcloud whiteboard: A SSRF vulnerability found that enables access to internal Chrome Devtools Protocol APIs that can leak the JWT…4.6 MediumN/AN/AOct 27, 2026
CVE-2026-82983: Nextcloud Tables: The Tables app's share-listing endpoint (GET /apps/tables/share/table/{tableId}) did not verify that the requesting…3.3 LowN/AN/AOct 27, 2026
51-75 of 522616