The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-92204: Airbyte: Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability7.7 HighN/A0%Oct 21, 2026
CVE-2026-92203: Airbyte: Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability7.7 HighN/A0%Oct 21, 2026
CVE-2026-92202: Luxion KeyShot: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92183: GIMP: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-89035: MikroTik RouterOS: MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows…7.4 High9.1 Critical0%Oct 21, 2026
CVE-2026-114493: LocalAI: LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that…8.6 High9.2 Critical0%Oct 21, 2026
CVE-2026-114492: flipped-aurora gin-vue-admin: gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to…6.5 Medium7.0 High0%Oct 21, 2026
CVE-2026-114491: bpampuch pdfmake: pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114265: ProjectWorlds Advanced Library Management System: A weakness has been identified in ProjectWorlds Advanced Library Management System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114264: ProjectWorlds Advanced Library Management System: A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.04.7 Medium2.0 Low0%Oct 21, 2026
CVE-2026-114263: ProjectWorlds Advanced Library Management System: A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.07.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114262: n/a file-management-system: A vulnerability was determined in file-management-system dc9ce1bf27f94b23d906cb1e86ce374dc94ca5df7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114176: DigitalME eRoom: Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-114133: nuxt: Nuxt is an open-source web development framework for Vue.js5.4 MediumN/A0%Oct 21, 2026
CVE-2026-114132: nuxt: Nuxt is an open-source web development framework for Vue.jsN/A6.3 Medium0%Oct 21, 2026
CVE-2026-114131: nuxt: Nuxt is an open-source web development framework for Vue.js6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114130: nuxt: Nuxt is an open-source web development framework for Vue.jsN/A2.3 Low0%Oct 21, 2026
CVE-2026-114129: uhop stream-json: stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint6.2 MediumN/A0%Oct 21, 2026
CVE-2026-114128: withastro astro: Astro is a web framework for content-driven websites6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114127: withastro astro: Astro is a web framework for content-driven websitesN/A2.3 Low0%Oct 21, 2026
CVE-2026-114126: storybookjs storybook: Storybook is a frontend workshop for building user interface components and pages in isolationN/A8.7 High0%Oct 21, 2026
CVE-2026-114125: storybookjs storybook: Storybook is a frontend workshop for building user interface components and pages in isolationN/A8.6 High0%Oct 21, 2026
CVE-2026-114124: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.9 LowN/A0%Oct 21, 2026
CVE-2026-112868: H5P: Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-111184: NoMachine: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
1076-1100 of 413321
‹›