The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-69080: Apache Software Foundation Apache Kylin: Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-69077: Apache Software Foundation Apache Kylin: Exposure of unauthorized cross-project job manipulation vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-69076: Apache Software Foundation Apache Kylin: Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-68573: Apache Software Foundation Apache Kylin: Improper Authentication vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-68572: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-61726: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists8.1 HighN/AN/AOct 16, 2026
CVE-2026-59970: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists7.7 HighN/AN/AOct 16, 2026
CVE-2026-59966: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists5.7 MediumN/AN/AOct 16, 2026
CVE-2026-59963: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists7.1 HighN/AN/AOct 16, 2026
CVE-2026-30971: zoneminder: ZoneMinder is a free, open source closed-circuit television software application8.8 HighN/AN/AOct 16, 2026
CVE-2026-108743: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-108709: Apache Software Foundation Apache Kylin: Authentication bypass within in-house network in Apache KylinN/AN/AN/AOct 16, 2026
CVE-2026-102834: bytedeco javacv: JavaCV provides Java interfaces to OpenCV, FFmpeg, and other multimedia libraries7.5 HighN/AN/AOct 16, 2026
CVE-2026-102608: zoneminder: ZoneMinder is a free, open source closed-circuit television software application9.0 CriticalN/AN/AOct 16, 2026
CVE-2026-102607: zoneminder: ZoneMinder is a free, open source closed-circuit television software application8.8 HighN/AN/AOct 16, 2026
CVE-2026-85977: Red Hat: A flaw was found in libtirpc5.3 MediumN/AN/AOct 16, 2026
CVE-2026-85231: Red Hat: A flaw was found in libtirpc6.5 MediumN/AN/AOct 16, 2026
CVE-2026-17491: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is could allow a remote authenticated attacker to bypass security restrictions due to…5.4 MediumN/AN/AOct 16, 2026
CVE-2026-17488: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to…4.3 MediumN/AN/AOct 16, 2026
CVE-2026-17275: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform unauthorized manipulation of distributed…3.7 LowN/AN/AOct 16, 2026
CVE-2026-17073: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks…5.4 MediumN/AN/AOct 16, 2026
CVE-2026-17068: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper…5.4 MediumN/AN/AOct 16, 2026
CVE-2026-111793: Openwave Messaging (Ireland) Limited Webtop Media Transcoder: Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the…4.3 MediumN/AN/AOct 16, 2026
CVE-2026-107674: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS…5.1 MediumN/AN/AOct 16, 2026
CVE-2026-102917: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege7.8 HighN/AN/AOct 16, 2026
76-100 of 412906
‹›