The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76306: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, a user that has the "Observer" role could use query filters in the…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76305: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to view apps could…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-76304: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, an authenticated user who does not hold a role with permission to edit Automation…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-76303: Splunk Splunk SOAR: In Splunk SOAR versions below 8.7.0, a user that holds a role with the install_apps capability could store…5.7 MediumN/A0%Oct 21, 2026
CVE-2026-76302: Splunk Splunk Enterprise: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…9.9 CriticalN/A0%Oct 21, 2026
CVE-2026-76301: Splunk Splunk Enterprise: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76300: Splunk Splunk Enterprise: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76299: Splunk Splunk Enterprise: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…9.9 CriticalN/A0%Oct 21, 2026
CVE-2026-76298: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4 and 10.2.8, a user who does not hold the "admin" or "power" Splunk roles…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76297: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could trick a user…4.2 MediumN/A0%Oct 21, 2026
CVE-2026-76296: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-76295: Splunk: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-76294: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-76293: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.3, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…7.2 HighN/A0%Oct 21, 2026
CVE-2026-76292: Splunk: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-76291: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user that holds a role with the…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76290: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, and 10.0.11, an unauthenticated user could send repeated requests…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76289: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, a user who does not hold the "admin" or…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-76288: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, an unauthenticated user could send a single…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76287: Splunk Splunk Enterprise: In Splunk Enterprise versions below 10.4.4, a user that holds a role with the preview_data_management_pipeline…5.4 MediumN/A0%Oct 21, 2026
CVE-2026-114441: oretnom23 php-travel-agency-system: A weakness has been identified in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114440: oretnom23 php-travel-agency-system: A vulnerability was identified in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114439: oretnom23 php-travel-agency-system: A vulnerability was determined in oretnom23 php-travel-agency-system7.3 High5.5 Medium1%Oct 21, 2026
CVE-2026-106053: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 21, 2026
CVE-2026-103090: Google SAM: Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the…N/A8.8 High0%Oct 21, 2026
951-975 of 545063
‹›