The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114440: oretnom23 php-travel-agency-system: A vulnerability was identified in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114439: oretnom23 php-travel-agency-system: A vulnerability was determined in oretnom23 php-travel-agency-system7.3 High5.5 Medium1%Oct 21, 2026
CVE-2026-106053: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 21, 2026
CVE-2026-103090: Google SAM: Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the…N/A8.8 High0%Oct 21, 2026
CVE-2026-100420: TP-Link Systems Inc. Deco BE63 V2.0: A sensitive information disclosure vulnerability in the cloud-client daemon of Deco BE63 allows authenticated attackers…N/A6.8 Medium0%Oct 21, 2026
CVE-2026-76307: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, a user that holds a role with the Users and Roles view permission could use the…7.2 HighN/A0%Oct 21, 2026
CVE-2026-76303: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store…5.7 MediumN/A0%Oct 21, 2026
CVE-2026-76298: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76293: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…7.2 HighN/A0%Oct 21, 2026
CVE-2026-76291: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76287: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline…5.4 MediumN/A0%Oct 21, 2026
CVE-2026-94423: Key Exchange without Entity AuthenticationN/AN/A0%Oct 21, 2026
CVE-2026-94140: Key Exchange without Entity AuthenticationN/AN/A0%Oct 21, 2026
CVE-2026-114509: laravel framework: Laravel is a web application frameworkN/A9.2 Critical0%Oct 21, 2026
CVE-2026-114508: laravel framework: Laravel is a web application framework6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114501: python-pillow Pillow: Pillow is a Python imaging libraryN/A6.3 Medium0%Oct 21, 2026
CVE-2026-114384: itsourcecode Online Cake Ordering System: A security vulnerability has been detected in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114383: TOTOLINK EX200: A weakness has been identified in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
CVE-2026-114382: TOTOLINK EX200: A security flaw has been discovered in TOTOLINK EX200 5.2.3c.720010.0 Critical9.3 Critical1%Oct 21, 2026
CVE-2026-114381: itsourcecode Online Cake Ordering System: A vulnerability was determined in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-112921: Exposure of Data Element to Wrong SessionN/AN/A0%Oct 21, 2026
CVE-2026-91403: Oracle Corporation: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…9.1 CriticalN/A0%Oct 21, 2026
CVE-2026-96778: python-pillow Pillow: Pillow is a Python imaging libraryN/A7.7 High0%Oct 21, 2026
CVE-2026-96644: python-pillow Pillow: Pillow is a Python imaging libraryN/A7.1 High0%Oct 21, 2026
CVE-2026-96643: python-pillow Pillow: Pillow is a Python imaging libraryN/A7.1 High0%Oct 21, 2026
951-975 of 545063
‹›