The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111665: PiranhaCMS Piranha CMS: Piranha CMS through 12.2 contains a missing authorization vulnerability in the Piranha.Manager LanguageApiController…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111660: wayn111 waynboot-mall: waynboot-mall through 2.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to…6.5 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111655: zoujingli think-plugs-admin: ThinkAdmin think-plugs-admin through 1.0.81 contains an insecure direct object reference vulnerability that allows…3.8 Low5.1 Medium0%Oct 16, 2026
CVE-2026-111650: HoshinoSuzumi chronoframe: ChronoFrame through 1.0.0 contains a missing authentication vulnerability in the server/api/wizard/ handlers that…8.6 High8.8 High0%Oct 16, 2026
CVE-2026-111645: zmister2016 MrDoc: MrDoc through 1.1.1 contains a missing object-level authorization vulnerability in the ImportLocalDoc API that allows…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111640: kuaifan dootask: DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111635: helicalinsight: Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files…4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111630: colinin abp-next-admin: abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111625: 10up Distributor: 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows…5.0 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server8.8 HighN/A1%Oct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server7.7 HighN/A0%Oct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker imagesN/A8.2 High0%Oct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images7.2 HighN/A0%Oct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server5.4 MediumN/A0%Oct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…7.1 HighN/A0%Oct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules4.9 MediumN/A0%Oct 16, 2026
CVE-2026-59967: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists5.4 MediumN/A0%Oct 16, 2026
CVE-2026-59962: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists6.5 MediumN/A0%Oct 16, 2026
CVE-2026-57169: Finsys dockhand: Dockhand is a Docker management application9.6 CriticalN/A0%Oct 16, 2026
CVE-2026-49868: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-102693: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.6 CriticalN/A0%Oct 16, 2026
1051-1075 of 409174
‹›