The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114603: open-telemetry opentelemetry-python: OpenTelemetry Python provides the Python API and SDK for OpenTelemetry5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114487: Devolutions Server: Missing authorization in the PAM AD computer import endpoint in Devolutions Server 2026.3.5.0 through 2026.3.10.0 and…N/AN/A0%Oct 22, 2026
CVE-2026-114486: Devolutions Server: Incorrect authorization in the Devolutions Gateway token generation in Devolutions Server 2026.3.10.0 and earlier…N/AN/A0%Oct 22, 2026
CVE-2026-114485: Devolutions Server: Insufficient protection of sensitive information in the user list endpoint in Devolutions Server 2026.3.10.0 and…N/AN/A0%Oct 22, 2026
CVE-2026-78846: n/a: AiDot Linkind Matter Smart Plug 1.01.32 is vulnerable to Buffer Overflow via SSDP local header parsing.N/AN/A0%Oct 22, 2026
CVE-2026-78801: n/a: An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote…N/AN/A0%Oct 22, 2026
CVE-2026-61791: schorschii OCO-Server: OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile…7.4 HighN/A0%Oct 22, 2026
CVE-2026-16477: MTW CleanShot X: CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot…N/A8.4 High0%Oct 22, 2026
CVE-2026-114515: schorschii OCO-Server: OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile…6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114510: stevereiner flexible-graphrag: Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across…7.1 HighN/A0%Oct 22, 2026
CVE-2026-113872: multer: multer is a middleware for Node.js that handles multipart/form-data file uploads7.5 HighN/A0%Oct 22, 2026
CVE-2026-111181: body-parser: body-parser is body parsing middleware for Node.js and Express7.5 HighN/A0%Oct 22, 2026
CVE-2026-94502: Silicon Labs EmberZNet: In EmberZNet 9.1.1 and earlier, a malformed Publish Price Matrix command can result in an out-of-bounds write…N/A7.5 High0%Oct 22, 2026
Amazon Linux AMI 2: CVE-2026-92709: Security patch for rsyslog (ALAS-2026-3967)8.1 HighN/A0%Oct 22, 2026
CVE-2026-89410: Silicon Labs Z-Wave SDK: In Z-Wave SDK 8.1.1 and earlier, a malformed NCP SPI command can trigger out-of-bounds reads that leak sensitive…N/A5.1 Medium0%Oct 22, 2026
CVE-2026-89409: Silicon Labs Z-Wave SDK: In Z-Wave SDK 8.1.1 and earlier (for 700/800 series devices) and 6.85.02 and earlier (for 500 series devices), missing…N/A5.3 Medium0%Oct 22, 2026
CVE-2026-85080: Silicon Labs EmberZNet: In EmberZNet 9.1.1 and earlier, a malformed GetGroupMembership message can result in an out-of-bounds write leading to…N/A6.0 Medium0%Oct 22, 2026
CVE-2026-85079: Silicon Labs EmberZNet: In EmberZNet 9.1.1 and earlier, a malformed Simple_Desc_req response can result in an out-of-bounds write potentially…N/A7.5 High0%Oct 22, 2026
CVE-2026-66282: Silicon Labs EmberZNet: In EmberZNet 9.1.1 and earlier, a malformed Publish Billing Period command can result in a recursive function call that…N/A6.0 Medium0%Oct 22, 2026
CVE-2026-66281: Silicon Labs EmberZNet: In EmberZNet 9.1.1 and earlier, a malformed Discover Attributes command can result in a loop with unreachable exit…N/A6.0 Medium0%Oct 22, 2026
CVE-2026-66279: Silicon Labs Connect SDK: In Connect SDK 4.3.1 and earlier and Flex SDK 3.7.7 and earlier, a message with invalid security settings may bypass…N/A7.2 High0%Oct 22, 2026
CVE-2026-115411: crawlseo: crawlseo before version 0.2.4 contains a server-side request forgery vulnerability in its crawler engine where…5.0 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115400: crawlseo: crawlseo before version 0.2.5 contains a cleartext storage vulnerability that allows attackers with database read…4.4 Medium6.7 Medium0%Oct 22, 2026
CVE-2026-115249: subhajitkhan online-clinic-management-system: A flaw has been found in subhajitkhan online-clinic-management-system up to e9ee77a8827a1446220fa07ee693dc4d9a29a5784.6 Medium2.0 Low0%Oct 22, 2026
CVE-2026-115248: subhajitkhan online-clinic-management-system: A vulnerability was detected in subhajitkhan online-clinic-management-system up to…5.4 Medium2.1 Low0%Oct 22, 2026
776-800 of 413119
‹›