The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113876: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR does not correctly check authorization for conditional create actions4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-113875: SmileCDR HAPI FHIR: On a SmileCDR HAPI FHIR server with REST-hook subscriptions enabled, if a user is granted subscription-creation…3.1 Low2.3 Low0%Oct 22, 2026
CVE-2025-69723: n/a: A reflected cross-site scripting (XSS) vulnerability in localstack v4.9.2 allows attackers to execute arbitrary…N/AN/A0%Oct 22, 2026
CVE-2025-65200: n/a: An issue was discovered in localstack 4.9.2 allowing attackers to execute arbitrary code via crafted content hosted on…N/AN/A0%Oct 22, 2026
CVE-2022-51026: bytebase: Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 Critical1%Oct 22, 2026
CVE-2026-97635: Agent Zero: The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads8.1 High8.6 High0%Oct 22, 2026
CVE-2026-93336: Canonical Juju: Missing authorization in the unit resources download route in Canonical Juju 4.0 through 4.0.15 allows a…N/A7.1 High0%Oct 22, 2026
CVE-2026-77157: Missing Support for Integrity Check6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-77156: Checkmarx github.com/checkmarx/ast-cli: Incomplete validation of extracted archive entry paths in ast-cli's tar extraction logic on Linux and macOS (used when…6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-54532: CloudPirates-io helm-charts: CloudPirates Open Source Helm Charts is a collection of Helm charts6.9 MediumN/A0%Oct 22, 2026
CVE-2026-54238: supabase realtime: Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSockets3.1 LowN/A0%Oct 22, 2026
CVE-2026-13599: ABB Ability Edgenius: Missing authentication for critical function vulnerability in ABB Ability Edgenius7.8 High5.8 Medium0%Oct 22, 2026
CVE-2026-115516: KNIME KNIME Business Hub SaaS: An incorrect authorization issue exposes basic account information to unauthorized remote users in KNIME Business Hub…N/A6.9 MediumN/AOct 22, 2026
CVE-2026-114611: schorschii OCO-Server: OCO-Server is a self-hosted endpoint management application for computer inventory, software deployment, and mobile…9.1 CriticalN/A0%Oct 22, 2026
CVE-2026-114610: py-pdf fpdf2: fpdf2 is a PDF creation library for Python6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114609: py-pdf fpdf2: fpdf2 is a PDF creation library for Python5.8 MediumN/A0%Oct 22, 2026
CVE-2026-113874: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR allows an untrusted bundle body to replace a partition identity previously established by a trusted…8.1 High8.6 High0%Oct 22, 2026
CVE-2026-113873: SmileCDR HAPI FHIR: SmileCDR HAPI FHIR does not properly handle highly compressed data, allowing an unauthenticated attacker to send…7.5 High8.7 High1%Oct 22, 2026
CVE-2026-108360: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files6.4 MediumN/A0%Oct 22, 2026
CVE-2026-108359: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet filesN/A8.7 High0%Oct 22, 2026
CVE-2026-108358: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet filesN/A8.8 High0%Oct 22, 2026
CVE-2026-108357: PHPOffice PhpSpreadsheet: PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet filesN/A8.8 High0%Oct 22, 2026
CVE-2026-97631: TianoCore EDK2: EDK2 contains a vulnerability in BIOS where a user may cause “Out-of-bounds Write”, Classic Buffer Overflow, and…N/A9.5 Critical0%Oct 22, 2026
CVE-2026-75508: graphql-python graphql-core: GraphQL-core is a Python port of the GraphQL.js reference implementation7.5 HighN/A1%Oct 22, 2026
CVE-2026-75507: graphql-python graphql-core: GraphQL-core is a Python port of the GraphQL.js reference implementation7.5 HighN/A1%Oct 22, 2026
976-1000 of 546512
‹›