The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78058: Apache Software Foundation Apache bRPC: Uncontrolled resource consumption in the HTTP/2 (h2) receive path of Apache bRPC (version < 1.18.0) on all platforms…N/AN/A0%Oct 21, 2026
CVE-2026-78048: Apache Software Foundation Apache bRPC: A reachable-assertion flaw in the HPACK header-compression decoder of the HTTP/2 (h2/gRPC) stack in Apache bRPC…N/AN/A0%Oct 21, 2026
CVE-2026-74758: Apache Software Foundation Apache bRPC: A heap use-after-free in the RTMP protocol component of Apache bRPC (versions < 1.18.0) allows a remote attacker to…N/AN/A0%Oct 21, 2026
CVE-2026-74757: Apache Software Foundation Apache bRPC: Uncontrolled resource allocation in the mcpack2pb component in Apache bRPC (version < 1.18.0) on all platforms allows…N/AN/A0%Oct 21, 2026
CVE-2026-74755: Apache Software Foundation Apache bRPC: An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all platforms allows remote…N/AN/A0%Oct 21, 2026
CVE-2026-66392: Apache Software Foundation Apache bRPC: Apache bRPC versions before 1.18.0 validate the server certificate chain when client TLS peer verification is enabled,…N/AN/A0%Oct 21, 2026
CVE-2026-61916: Apache Software Foundation Apache bRPC: Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms…N/AN/A0%Oct 21, 2026
CVE-2026-61902: Apache Software Foundation Apache bRPC: Apache bRPC versions before 1.18.0 do not consistently enforce the configured max_body_size limit in non-progressive…N/AN/A0%Oct 21, 2026
CVE-2026-59562: Apache Software Foundation Apache IoTDB: Missing authentication for critical function vulnerability in Apache IoTDBN/AN/A0%Oct 21, 2026
CVE-2026-59229: Apache Software Foundation Apache IoTDB: The Legacy Pipe receiver protocol (handshake / sendPipeData) uses a hardcoded SUPER_USER (root) identity when executing…N/AN/A0%Oct 21, 2026
CVE-2026-58064: Apache Software Foundation Apache bRPC: The Redis protocol implementation in Apache bRPC allowed inline command parsing to allocate and copy the full…N/AN/A0%Oct 21, 2026
CVE-2026-56388: Apache Software Foundation Apache bRPC: The Redis server command parser in Apache bRPC accepts an empty RESP array as a command headerN/AN/A0%Oct 21, 2026
CVE-2026-56387: Apache Software Foundation Apache bRPC: The RTMP AMF parser in Apache bRPC accepts AMF string lengths and array counts directly from untrusted inputN/AN/A0%Oct 21, 2026
CVE-2026-56386: Apache Software Foundation Apache bRPC: Integer underflow and out-of-bounds read in the HTTP/2 server DATA frame parser in Apache bRPC allows an…7.5 HighN/A1%Oct 21, 2026
CVE-2026-54427: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the AMF parser in Apache bRPC < 1.18.0 allows a remote RTMP peer to crash a bRPC process by…N/AN/A0%Oct 21, 2026
CVE-2026-54426: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the Redis reply parser in Apache bRPC < 1.18.0 allows a remote Redis server peer to crash a…N/AN/A0%Oct 21, 2026
CVE-2026-54425: Apache Software Foundation Apache bRPC: Uncontrolled recursion in the HTTP/2 HPACK decoder in Apache bRPC before 1.18.0 allows remote attackers to cause denial…N/AN/A0%Oct 21, 2026
CVE-2026-48830: Apache Software Foundation Apache bRPC: Improper authentication in Apache bRPC through 1.17.0 allows a remote unauthenticated attacker to bypass authentication…N/AN/A0%Oct 21, 2026
CVE-2026-114242: dhikshitha29 Insurance-Management-System: A vulnerability was identified in dhikshitha29 Insurance-Management-System…7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-87096: Acronis Acronis Cyber Infrastructure: Sensitive information disclosure and manipulation due to improper authorization checks3.3 LowN/A0%Oct 21, 2026
CVE-2026-87095: Acronis Acronis Cyber Infrastructure: Sensitive information disclosure and manipulation due to improper authorization checks9.1 CriticalN/A0%Oct 21, 2026
CVE-2026-58663: Apache Software Foundation Apache IoTDB: An authentication bypass vulnerability exists in Apache IoTDB's Thrift RPC service This issue affects Apache IoTDB:…N/AN/A0%Oct 21, 2026
CVE-2026-41114: Apache Software Foundation Apache IoTDB JDBC driver: Uncontrolled Resource Consumption vulnerability in Apache IoTDB JDBC driverN/AN/A0%Oct 21, 2026
CVE-2026-110884: geekontheroad Live Summary for Gravity Forms: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in geekontheroad…7.1 HighN/A0%Oct 21, 2026
CVE-2026-110370: GS Plugins GS Pins for Pinterest: Deserialization of Untrusted Data vulnerability in GS Plugins GS Pins for Pinterest gs-pinterest-portfolio allows…8.8 HighN/A0%Oct 21, 2026
826-850 of 418797
‹›