The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114633: WWBN AVideo: WWBN AVideo before 29.4.0 contains an incorrect authorization vulnerability that allows delegated Users Admin accounts…6.5 Medium7.0 High0%Oct 22, 2026
CVE-2026-114577: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High5.5 Medium0%Oct 22, 2026
CVE-2026-114576: Linksys RE6250: A vulnerability has been found in Linksys RE6250 1.0.04.0013.7 Low2.9 Low0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-16255: Incorrect Authorization5.9 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-15723: Improper Neutralization of Special Elements used in an LDAP Query8.2 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-14288: Use of Incorrectly-Resolved Name or Reference3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-13319: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-12664: Incorrect Authorization6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114714: Roundcube Webmail: Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the…5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114575: TOTOLINK A950RG: A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268_B2022110410.0 Critical9.3 Critical2%Oct 22, 2026
CVE-2026-114574: massCodeIO massCode: A security vulnerability has been detected in massCodeIO massCode 5.104.3 Medium2.1 Low0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112378: Use of Less Trusted Source4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112326: Improper Cleanup on Thrown Exception3.1 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-112212: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-110264: Integer Overflow or Wraparound10.0 CriticalN/A1%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105777: Insertion of Sensitive Information Into Sent Data4.3 MediumN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-105711: Use of Cache Containing Sensitive Information3.5 LowN/A0%Oct 22, 2026
Gitlab Gitlab: CVE-2026-103515: Incorrect Authorization2.7 LowN/A0%Oct 22, 2026
CVE-2026-89052: TP-Link Systems Inc. Archer C6 V2: A hardcoded cryptographic key management vulnerability exists in Archer C6 due to the use of a universal cryptographic…N/A5.9 Medium0%Oct 21, 2026
CVE-2026-76531: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…9.9 CriticalN/A0%Oct 21, 2026
CVE-2026-76530: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…8.8 HighN/A0%Oct 21, 2026
CVE-2026-76529: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76528: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76527: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
CVE-2026-76526: Splunk Splunk SOAR: As part of Cisco's ongoing commitment to proactive security and product quality, Cisco has conducted a comprehensive…N/AN/A0%Oct 21, 2026
1051-1075 of 530113
‹›