The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-96638: python-pillow Pillow: Pillow is a Python imaging library6.5 MediumN/A0%Oct 21, 2026
CVE-2026-96637: python-pillow Pillow: Pillow is a Python imaging libraryN/A7.1 High0%Oct 21, 2026
CVE-2026-96636: python-pillow Pillow: Pillow is a Python imaging library6.5 MediumN/A0%Oct 21, 2026
CVE-2026-82987: Viewsonic vCast: There exists a screen capture endpoint in vCast media streaming service in ViewSonic ViewBoard unknown allows a remote,…N/AN/A0%Oct 21, 2026
CVE-2026-29001: TastyIgniter: TastyIgniter through 4.4.5 contain a PHP object injection vulnerability that allows authenticated administrators to…7.2 High8.6 High1%Oct 21, 2026
CVE-2026-114380: itsourcecode Online Cake Ordering System: A vulnerability was found in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114379: EKKOLearnAI ekko-studio: A flaw has been found in EKKOLearnAI ekko-studio up to 1.0.65.4 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114378: itsourcecode Online Cake Ordering System: A vulnerability was detected in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114377: leomoon-studios wiki-go: A security vulnerability has been detected in leomoon-studios wiki-go up to 1.9.13.8 Low2.0 Low0%Oct 21, 2026
CVE-2026-114145: gitpython-developers GitPython: GitPython is a python library used to interact with Git repositories7.5 HighN/A0%Oct 21, 2026
CVE-2026-114144: BinaryMuse toml-node: toml-node is a TOML parser for Node.js and the browser7.5 HighN/A0%Oct 21, 2026
CVE-2026-114143: BinaryMuse toml-node: toml-node is a TOML parser for Node.js and the browserN/A8.7 High0%Oct 21, 2026
CVE-2026-114142: BinaryMuse toml-node: toml-node is a TOML parser for Node.js and the browserN/A8.8 High0%Oct 21, 2026
CVE-2026-114141: BinaryMuse toml-node: toml-node is a TOML parser for Node.js and the browserN/A8.7 High0%Oct 21, 2026
CVE-2026-114140: jupyter nbconvert: The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templatesN/A8.8 High0%Oct 21, 2026
CVE-2026-114139: getsentry sentry-javascript: Sentry-Javascript is an official Sentry SDKs for JavaScriptN/A9.1 Critical0%Oct 21, 2026
CVE-2026-114138: encode django-rest-framework: Django REST framework is a toolkit for building Web APIs7.5 HighN/A0%Oct 21, 2026
CVE-2026-114137: encode django-rest-framework: Django REST framework is a toolkit for building Web APIs7.4 HighN/A0%Oct 21, 2026
CVE-2026-113811: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 21, 2026
CVE-2026-114406: Red Hat: The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included…6.8 MediumN/A0%Oct 21, 2026
CVE-2026-85518: Red Hat: A flaw was found in OpenSCAP6.1 MediumN/A0%Oct 21, 2026
CVE-2026-114438: Red Hat: A flaw was found in the Update User Locale required action of the Keycloak identity and access management solution4.2 MediumN/A0%Oct 21, 2026
CVE-2026-114376: leomoon-studios wiki-go: A weakness has been identified in leomoon-studios wiki-go up to 1.9.16.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114375: leomoon-studios wiki-go: A security flaw has been discovered in leomoon-studios wiki-go up to 1.9.16.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114374: leomoon-studios wiki-go: A vulnerability was identified in leomoon-studios wiki-go up to 1.9.14.3 Medium2.1 Low0%Oct 21, 2026
1001-1025 of 413321
‹›