The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114650: MongoDB: A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side…5.9 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115388: bytecodealliance wasmtime: wasmtime-wasi-http in Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 does not enforce the…6.2 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-114649: MongoDB C# Driver: The MongoDB C# Driver compares TLS client certificates by issuer and serial number only when deciding whether two…6.8 Medium7.6 HighN/AOct 22, 2026
CVE-2026-115387: bytecodealliance wasmtime: Wasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 contains a denial of service vulnerability in…6.2 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-114648: MongoDB C# Driver: The MongoDB C# Driver does not neutralize dot and dollar characters in dictionary keys, field names and array-filter…7.6 High7.2 HighN/AOct 22, 2026
CVE-2026-115386: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an information disclosure…2.6 Low2.1 LowN/AOct 22, 2026
CVE-2026-115385: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi…6.2 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-114647: MongoDB C# Driver: The MongoDB C# Driver does not reject replacement documents whose top-level field names begin with a dollar sign in…4.3 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115384: bytecodealliance wasmtime: Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a stack buffer overflow vulnerability that allows…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-114646: MongoDB C# Driver: A data-validation flaw exists in the BSON handling and binary serialization path of the MongoDB C# Driver6.5 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115383: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains an improper validation vulnerability that accepts…4.8 Medium5.9 MediumN/AOct 22, 2026
CVE-2026-115382: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial-of-service vulnerability in its wasi:http…4.8 Medium5.9 MediumN/AOct 22, 2026
CVE-2026-114645: MongoDB C Driver: A 32-bit integer wraparound in the MongoDB C Driver's Windows-only Kerberos/SSPI authentication code can cause an…5.2 Medium5.7 MediumN/AOct 22, 2026
CVE-2026-115381: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains an unbounded memory allocation in the…4.8 Medium5.9 MediumN/AOct 22, 2026
CVE-2026-114644: MongoDB C# Driver: The MongoDB C# Driver's BSON library contains an uncontrolled resource consumption weakness in its deserialization…5.9 Medium8.2 HighN/AOct 22, 2026
CVE-2026-115380: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in…4.0 Medium5.1 MediumN/AOct 22, 2026
CVE-2026-114643: MongoDB C# Driver: The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON…5.4 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115379: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves…5.7 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115378: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in…5.8 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115377: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-115376: lxc incus: Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…7.7 High8.3 HighN/AOct 22, 2026
CVE-2026-115375: lxc incus: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-115374: lxc incus: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that…7.1 High7.1 HighN/AOct 22, 2026
CVE-2026-115373: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET…6.3 Medium7.0 HighN/AOct 22, 2026
CVE-2026-115372: lxc incus: Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set…8.5 High9.0 CriticalN/AOct 22, 2026
51-75 of 416054
‹›