The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111640: kuaifan dootask: DooTask through 1.9.66 contains a missing authorization vulnerability in WebSocketDialog::checkDialog() that skips the…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111635: helicalinsight: Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files…4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111630: colinin abp-next-admin: abp-next-admin 10.2.0 through 10.6.0 contains an insecure direct object reference vulnerability in the…5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111625: 10up Distributor: 10up Distributor before 2.3.2 contains a missing authorization vulnerability in ajax_push() that allows…5.0 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server8.8 HighN/A1%Oct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server7.7 HighN/A0%Oct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker imagesN/A8.2 High0%Oct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images7.2 HighN/A0%Oct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server5.4 MediumN/A0%Oct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…7.1 HighN/A0%Oct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules4.9 MediumN/A0%Oct 16, 2026
CVE-2026-59967: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists5.4 MediumN/A0%Oct 16, 2026
CVE-2026-59962: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists6.5 MediumN/A0%Oct 16, 2026
CVE-2026-57169: Finsys dockhand: Dockhand is a Docker management application9.6 CriticalN/A0%Oct 16, 2026
CVE-2026-49868: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-102693: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.6 CriticalN/A0%Oct 16, 2026
CVE-2026-102692: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.1 CriticalN/A0%Oct 16, 2026
CVE-2026-96425: UBports lomiri-download-manager: Incorrect DBus policy for lomiri-download-manager allows arbitrary user to run arbitrary command as root over DBus5.5 MediumN/A0%Oct 16, 2026
CVE-2026-96424: UBports lomiri-download-manager: Incorrect DBus policy for lomiri-upload-manager (part of lomiri-download-manager) allows arbitrary user to read…7.8 HighN/A0%Oct 16, 2026
CVE-2026-95859: libp2p rust-libp2p: libp2p-rust is the official Rust language implementation of the libp2p networking stackN/A8.7 High0%Oct 16, 2026
CVE-2026-92263: CodeWithCJ SparkyFitness: SparkyFitness is a self-hosted, AI-powered health and fitness tracker for families7.2 HighN/A0%Oct 16, 2026
1076-1100 of 409174
‹›