The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114638: traefik: Traefik v3.7.0 before v3.7.14 contains an improper authentication vulnerability in the Kubernetes Ingress NGINX…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114637: traefik: Traefik from v3.2.0 before v3.7.14 contains an authentication bypass vulnerability in the experimental FastProxy…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114636: traefik: Traefik v3.7.13 before v3.7.14 contains an access-control bypass in the Kubernetes Ingress NGINX provider, where the…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114635: traefik: Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped…8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114634: WWBN AVideo: WWBN AVideo before 29.4.0 contains a blind server-side request forgery vulnerability in getHeaderContentTypeFromURL()…4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-114633: WWBN AVideo: WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts…6.5 Medium7.0 High0%Oct 22, 2026
CVE-2026-114577: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 22, 2026
CVE-2026-114576: Linksys RE6250: A vulnerability has been found in Linksys RE6250 1.0.04.0013.7 Low2.9 Low0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-16255: Incorrect Authorization5.9 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-15723: Improper Neutralization of Special Elements used in an LDAP Query8.2 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-14288: Use of Incorrectly-Resolved Name or Reference3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-13319: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-12664: Incorrect Authorization6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114714: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114575: TOTOLINK A950RG: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 Critical2%Oct 22, 2026
CVE-2026-114574: massCodeIO massCode: A security vulnerability has been detected in massCodeIO massCode 5.104.3 Medium2.1 Low0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112378: Use of Less Trusted Source4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112326: Improper Cleanup on Thrown Exception3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112212: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-110264: Integer Overflow or Wraparound10.0 CriticalN/A1%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105777: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105711: Use of Cache Containing Sensitive Information3.5 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-103515: Incorrect Authorization2.7 LowN/A0%Oct 22, 2026
CVE-2026-89052: TP-Link Systems Inc. Archer C6 V2: A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic…N/A5.9 Medium0%Oct 21, 2026
CVE-2026-76531: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…9.9 CriticalN/A0%Oct 21, 2026
1026-1050 of 413119
‹›