The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-104749: bitpressadmin: The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is…7.5 HighN/AN/AOct 14, 2026
CVE-2026-103425: masaakitanaka Booking Package: The Booking Package plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all…6.4 MediumN/AN/AOct 14, 2026
CVE-2026-103423: masaakitanaka Booking Package: The Booking Package plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,…7.5 HighN/AN/AOct 14, 2026
CVE-2026-110385: ONLYOFFICE Document Server: A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated…N/A8.7 HighN/AOct 14, 2026
CVE-2026-110359: Hyland Desktop Host: Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation7.8 HighN/AN/AOct 14, 2026
CVE-2026-108473: TP-Link Systems Inc.: Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocolN/A8.7 HighN/AOct 14, 2026
CVE-2026-92817: Inductive Automation Ignition: The Ignition Perspective module does not properly validate session privileges when determining Designer-level access8.8 High8.7 HighN/AOct 14, 2026
CVE-2026-46449: Akamai Guardicore Platform Agent: The Akamai Guardicore Platform Agent (GPA) before 7.4 for macOS is affected by a local privilege escalation…6.7 MediumN/AN/AOct 14, 2026
CVE-2026-50215: n/a: A use-after-free exists in the Windows WFP packet-capture driver shipped with Akamai Guardicore Platform Agent (GPA)…N/AN/AN/AOct 14, 2026
CVE-2026-88964: OpenVPN: An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated…N/A7.1 HighN/AOct 13, 2026
CVE-2026-53564: Citrix UniconOS: Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR…N/A5.1 MediumN/AOct 13, 2026
CVE-2026-53563: Citrix UniconOS: Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR…N/A6.9 MediumN/AOct 13, 2026
CVE-2026-15468: HYPR Passwordless: Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege…N/A6.9 MediumN/AOct 13, 2026
CVE-2026-105390: OpenVPN ovpn-dco-win: Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7…N/A6.9 MediumN/AOct 13, 2026
CVE-2026-105151: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 13, 2026
CVE-2026-105142: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 13, 2026
CVE-2026-104922: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 13, 2026
CVE-2026-97381: LegacyUpdate: Legacy Update is a tool for activating and installing updates on legacy Windows PCs9.9 CriticalN/AN/AOct 13, 2026
CVE-2026-95634: Adobe: CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in…8.6 HighN/AN/AOct 13, 2026
CVE-2026-95633: Adobe: CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could…7.5 HighN/AN/AOct 13, 2026
CVE-2026-95632: Adobe: CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could…7.5 HighN/AN/AOct 13, 2026
CVE-2026-94453: The Libreswan Project libreswan: Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the…7.5 HighN/AN/AOct 13, 2026
CVE-2026-84790: OpenVPN: OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate…N/A7.6 HighN/AOct 13, 2026
CVE-2026-84420: Citirx Citrix Workspace app for Windows: Out-of-bounds read vulnerability in Citirx Citrix Workspace app for WindowsN/A5.8 MediumN/AOct 13, 2026
CVE-2026-84419: Citrix Workspace app for Windows: Out-of-bounds write vulnerability in Citrix Workspace app for WindowsN/A6.8 MediumN/AOct 13, 2026
51-75 of 657253
‹›