The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114121: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113800: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113799: abdolence slack-morphism-rust: Slack Morphism is a client library for Slack Web/Events API/Socket Mode and Block Kit5.3 MediumN/A0%Oct 21, 2026
CVE-2026-113798: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113797: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.1 LowN/A0%Oct 21, 2026
CVE-2026-113796: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS4.2 MediumN/A0%Oct 21, 2026
CVE-2026-92183: GIMP: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92209: NoMachine: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92208: NoMachine: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 HighN/A1%Oct 21, 2026
CVE-2026-111184: NoMachine: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-111183: GStreamer: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 21, 2026
CVE-2026-76497: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…6.6 MediumN/A0%Oct 21, 2026
CVE-2026-76505: Cisco Cisco IOS XR Software: A vulnerability in the IPv4 packet processing functionality of Cisco IOS XR Software that affects Cisco ASR 9000 and…7.5 HighN/A0%Oct 21, 2026
CVE-2026-76524: Cisco Cisco Open Source Snort3: A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated,…7.8 HighN/A0%Oct 21, 2026
CVE-2026-76496: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.0 HighN/A0%Oct 21, 2026
CVE-2026-76495: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.8 HighN/A0%Oct 21, 2026
CVE-2026-76494: Cisco Cisco TelePresence Video Communication Server (VCS) Expressway: As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software…7.8 HighN/A0%Oct 21, 2026
CVE-2026-114490: Progressive Robot Ltd hMailServer: Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an…7.8 HighN/A0%Oct 21, 2026
CVE-2026-114489: Progressive Robot Ltd hMailServer: Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6…8.1 HighN/A0%Oct 21, 2026
CVE-2026-114479: Progressive Robot Ltd hMailServer: Not failing securely in the anti-virus attachment-stripping action of Progressive Robot hMailServer 6.0.0 through 6.3.6…5.8 MediumN/A0%Oct 21, 2026
CVE-2026-114478: Progressive Robot Ltd hMailServer: Insufficient preservation of the original sender in the forwarding of Progressive Robot hMailServer 6.0.0 through 6.3.6…5.9 MediumN/A0%Oct 21, 2026
CVE-2026-114477: Progressive Robot Ltd hMailServer: Missing authorization in the REST metrics route of Progressive Robot hMailServer 6.2.25 through 6.3.6 allows a remote…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-114476: Progressive Robot Ltd hMailServer: Incorrect authorization in the REST administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a…7.5 HighN/A0%Oct 21, 2026
CVE-2026-114475: Progressive Robot Ltd hMailServer: Missing authorization in the REST role-management routes of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows a…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114474: Progressive Robot Ltd hMailServer: Use of a less trusted source for the envelope sender in the external-account download of Progressive Robot hMailServer…5.9 MediumN/A0%Oct 21, 2026
1051-1075 of 545063
‹›