The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-58497: olo-dot-io Uni-CLI: Uni-CLI gives people and agents one command interface for websites, browsers, desktop applications, local tools, and MCPN/A8.6 HighN/AOct 23, 2026
CVE-2026-55222: ilbers isar: Isar is an integration system for automated root filesystem generation5.1 MediumN/AN/AOct 23, 2026
CVE-2026-93640: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows…7.8 HighN/AN/AOct 23, 2026
CVE-2026-93639: Zimbra Zimbra Collaboration Suite: A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no…8.7 HighN/AN/AOct 23, 2026
CVE-2026-93638: Zimbra Zimbra Collaboration Suite: A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an…6.1 MediumN/AN/AOct 23, 2026
CVE-2026-93636: Zimbra Zimbra Collaboration Suite: An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-93634: Zimbra Zimbra Collaboration Suite: A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-93633: Zimbra Zimbra Collaboration Suite: A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access…5.4 MediumN/AN/AOct 23, 2026
CVE-2026-93631: Zimbra Zimbra Collaboration Suite: A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition…7.1 HighN/AN/AOct 23, 2026
CVE-2026-93630: Zimbra Zimbra Collaboration Suite: A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-93629: Zimbra Zimbra Collaboration Suite: An organizer authentication vulnerability in Zimbra Collaboration Suite (ZCS) allows an unauthenticated email sender to…5.3 MediumN/AN/AOct 23, 2026
CVE-2026-93628: Zimbra Zimbra Collaboration Suite: An attendee authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows an…5.3 MediumN/AN/AOct 23, 2026
CVE-2026-93627: Zimbra Zimbra Collaboration Suite: An organizer authentication vulnerability in the email calendar processing of Zimbra Collaboration Suite (ZCS) allows…5.3 MediumN/AN/AOct 23, 2026
CVE-2026-57208: entireio cli: Entire CLI hooks into Git workflows to capture AI agent sessionsN/A6.2 MediumN/AOct 23, 2026
CVE-2026-57207: netboxlabs netbox-mcp-server: NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox5.9 MediumN/AN/AOct 23, 2026
CVE-2026-55826: stape-io gtm-server-side-wordpress-plugin: The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websitesN/A8.7 HighN/AOct 23, 2026
CVE-2026-55606: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt6.5 MediumN/AN/AOct 23, 2026
CVE-2026-53921: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-53920: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrtN/A8.7 HighN/AOct 23, 2026
CVE-2026-53918: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrtN/A8.8 HighN/AOct 23, 2026
CVE-2026-50057: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra…7.8 HighN/AN/AOct 23, 2026
CVE-2026-50056: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the…7.8 HighN/AN/AOct 23, 2026
CVE-2026-50053: Zimbra Zimbra Collaboration Suite: A request attribute override vulnerability in Zimbra Collaboration Suite (ZCS) allows unauthenticated requests to /h/*…8.7 HighN/AN/AOct 23, 2026
CVE-2026-115786: Zimbra Zimbra Collaboration Suite: A mailbox quota-accounting vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to consume…6.5 MediumN/AN/AOct 23, 2026
CVE-2026-115785: Zimbra Zimbra Collaboration Suite: An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS)…4.3 MediumN/AN/AOct 23, 2026
76-100 of 413321
‹›