The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-96355: Drupal Webform: Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Drupal Webform allows Code…N/AN/A0%Oct 22, 2026
CVE-2026-96376: Drupal Cloud: Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal…N/AN/A1%Oct 22, 2026
CVE-2026-16255: GitLab: GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.3.6, 19.4 before 19.4.3, and…5.9 MediumN/A0%Oct 22, 2026
CVE-2026-14288: GitLab: GitLab has remediated an issue in GitLab EE affecting all versions from 17.4 before 19.3.6, 19.4 before 19.4.3, and…3.1 LowN/A0%Oct 22, 2026
CVE-2026-13319: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.10 before 19.3.6, 19.4 before 19.4.3, and…4.3 MediumN/A0%Oct 22, 2026
CVE-2026-114714: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114575: TOTOLINK A950RG: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 Critical2%Oct 22, 2026
CVE-2026-114574: massCodeIO massCode: A security vulnerability has been detected in massCodeIO massCode 5.104.3 Medium2.1 Low0%Oct 22, 2026
CVE-2026-112378: GitLab: GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and…4.3 MediumN/A0%Oct 22, 2026
CVE-2026-112326: GitLab: GitLab has remediated an issue in GitLab EE affecting all versions from 17.8 before 19.3.6, 19.4 before 19.4.3, and…3.1 LowN/A0%Oct 22, 2026
CVE-2026-112212: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.3.6, 19.4 before 19.4.3, and…7.5 HighN/A0%Oct 22, 2026
CVE-2026-105777: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6.5 before 19.3.6, 19.4 before 19.4.3,…4.3 MediumN/A0%Oct 22, 2026
CVE-2026-105711: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.0 before 19.3.6, 19.4 before 19.4.3, and…3.5 LowN/A0%Oct 22, 2026
CVE-2026-103515: GitLab: GitLab has remediated an issue in GitLab EE affecting all versions from 19.2 before 19.3.6, 19.4 before 19.4.3, and…2.7 LowN/A0%Oct 22, 2026
CVE-2026-110264: GitLab: An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1…10.0 CriticalN/A1%Oct 22, 2026
CVE-2025-65200: n/a: An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on…N/AN/AN/AOct 22, 2026
CVE-2025-69723: n/a: A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary…N/AN/AN/AOct 22, 2026
CVE-2026-12664: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.3.6, 19.4 before 19.4.3, and…6.8 MediumN/A0%Oct 21, 2026
CVE-2026-15723: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 before 19.4.3, and…8.2 HighN/A0%Oct 21, 2026
CVE-2026-89052: TP-Link Systems Inc. Archer C6 V2: A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic…N/A5.9 Medium0%Oct 21, 2026
CVE-2026-76531: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…9.9 CriticalN/A0%Oct 21, 2026
CVE-2026-76530: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76529: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76528: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76527: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
876-900 of 545063