The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-20236: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…7.5 HighN/A0%Oct 21, 2026
CVE-2026-20221: Cisco: Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel decapsulation…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20291: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…7.8 HighN/A0%Oct 21, 2026
CVE-2026-20197: Cisco: Multiple Cisco products are affected by a vulnerability in the Snort 3 Teredo Detection Engine that could allow an…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20218: Cisco: A vulnerability in the Snort 3 Visual Basic for Applications (VBA) Decompression Engine of multiple Cisco products…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20179: Cisco: Multiple Cisco products are affected by a vulnerability in the Snort 3 Generic Routing Encapsulation (GRE) Detection…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20043: Cisco: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3…9.0 CriticalN/A0%Oct 21, 2026
CVE-2026-20019: Cisco: Multiple Cisco products are affected by a vulnerability in the Snort 3 NetFlow Detection Engine that could allow an…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20011: Cisco: Multiple Cisco products are affected by a vulnerability in the Snort 3 SMTP MIME Decoder that could allow an…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-98869: Linux: In the Linux kernel, the following vulnerability has been resolved: bpf: Infer zext_dst based on static register…N/AN/A0%Oct 21, 2026
CVE-2026-114252: itsourcecode Sales-and-Inventory-System: A vulnerability was found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114251: itsourcecode Sales-and-Inventory-System: A vulnerability has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114250: itsourcecode Sales-and-Inventory-System: A flaw has been found in itsourcecode Sales-and-Inventory-System up to 0a3c45a78aaff3601b8cf9ce8ba82ff5c345caac6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-113786: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A2.3 Low0%Oct 21, 2026
CVE-2026-113779: pfrest pfSense-pkg-RESTAPI: The pfSense REST API package is an unofficial, open-source REST and GraphQL API for pfSense CE and pfSense Plus…8.8 HighN/A0%Oct 21, 2026
CVE-2026-112221: Brainstorm Force SureCart: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…7.1 HighN/A0%Oct 21, 2026
CVE-2026-111852: WPdreams Ajax Search Lite: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPdreams Ajax…9.3 CriticalN/A0%Oct 21, 2026
CVE-2026-111848: Dylan Kuhn Geo Mashup: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo…7.1 HighN/A0%Oct 21, 2026
CVE-2026-111840: VideoWhisper.com Paid Videochat Turnkey Site: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VideoWhisper.com…7.1 HighN/A0%Oct 21, 2026
CVE-2026-111838: ThemeHunk ThemeHunk Customizer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk…7.1 HighN/A0%Oct 21, 2026
CVE-2026-111837: Wasiliy Strecker Contest Gallery: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wasiliy Strecker…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-111835: bjorntech BjornTech Swish for WooCommerce: Missing Authorization vulnerability in bjorntech BjornTech Swish for WooCommerce woo-swish-e-commerce allows Exploiting…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-111834: Kitae Park Mang Board WP: Unrestricted Upload of File with Dangerous Type vulnerability in Kitae Park Mang Board WP mangboard allows Upload a Web…9.9 CriticalN/A0%Oct 21, 2026
CVE-2026-111833: Bold Grid weForms: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bold Grid weForms…7.5 HighN/A0%Oct 21, 2026
CVE-2026-111832: WP Mailster: Unrestricted Upload of File with Dangerous Type vulnerability in WP Mailster WP Mailster wp-mailster allows Upload a…10.0 CriticalN/A0%Oct 21, 2026
726-750 of 416054
‹›