The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-55222: ilbers isar: Isar is an integration system for automated root filesystem generation5.1 MediumN/AN/AOct 23, 2026
CVE-2026-54668: kitodo kitodo-production: Kitodo.Production is a workflow management tool for mass digitization and is part of the Kitodo Digital Library SuiteN/A8.7 HighN/AOct 23, 2026
CVE-2026-53942: conda infrastructure: Conda Organization Infrastructure is a centralized location for infrastructure codes9.9 CriticalN/AN/AOct 23, 2026
CVE-2026-49442: cacti: Cacti is an open source performance and fault management framework5.3 MediumN/AN/AOct 23, 2026
CVE-2026-46652: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-46651: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser9.8 CriticalN/AN/AOct 23, 2026
CVE-2026-46531: cacti: Cacti is an open source performance and fault management framework5.5 MediumN/AN/AOct 23, 2026
CVE-2026-46347: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser6.8 MediumN/AN/AOct 23, 2026
CVE-2026-46346: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser6.5 MediumN/AN/AOct 23, 2026
CVE-2026-39902: cacti: Cacti is an open source performance and fault management framework7.2 HighN/AN/AOct 23, 2026
CVE-2026-115478: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaultsN/A7.1 HighN/AOct 23, 2026
CVE-2026-115477: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaultsN/A7.1 HighN/AOct 23, 2026
CVE-2026-112333: GFI Software GFI Archiver: GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report…5.4 Medium5.1 MediumN/AOct 23, 2026
CVE-2026-106765: n/a: An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList…7.5 HighN/AN/AOct 23, 2026
CVE-2026-106764: n/a: An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch…7.5 HighN/AN/AOct 23, 2026
CVE-2026-106763: n/a: An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the…7.5 HighN/AN/AOct 23, 2026
CVE-2026-102786: phoca.cz Phoca Gallery extension for Joomla: Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca…N/A8.6 HighN/AOct 23, 2026
CVE-2026-93640: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows…7.8 HighN/AN/AOct 23, 2026
CVE-2026-93639: Zimbra Zimbra Collaboration Suite: A missing authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows a delegated administrator with no…8.7 HighN/AN/AOct 23, 2026
CVE-2026-93638: Zimbra Zimbra Collaboration Suite: A reflected cross-site scripting vulnerability in the login page of Zimbra Collaboration Suite (ZCS) allows an…6.1 MediumN/AN/AOct 23, 2026
CVE-2026-93636: Zimbra Zimbra Collaboration Suite: An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to query…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-93634: Zimbra Zimbra Collaboration Suite: A cross-account authorization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to insert…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-93633: Zimbra Zimbra Collaboration Suite: A CSS sanitization vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user with Briefcase access…5.4 MediumN/AN/AOct 23, 2026
CVE-2026-93631: Zimbra Zimbra Collaboration Suite: A cross-site request forgery vulnerability in the OAuth extension of Zimbra Collaboration Suite (ZCS) Network Edition…7.1 HighN/AN/AOct 23, 2026
CVE-2026-93630: Zimbra Zimbra Collaboration Suite: A hostname canonicalization vulnerability in the email HTML sanitizers of Zimbra Collaboration Suite (ZCS) allows an…4.3 MediumN/AN/AOct 23, 2026
76-100 of 413321
‹›