The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109461: Microsoft Microsoft Identity Client for NodeJS: Origin validation error in Microsoft Authentication Library (MSAL) for Node.js allows an unauthorized attacker to…5.9 MediumN/A0%Oct 16, 2026
CVE-2026-102552: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the DNS resolver in Amazon FreeRTOS-Plus-TCP before…5.9 Medium8.2 High0%Oct 16, 2026
CVE-2026-102551: FreeRTOS FreeRTOS-Plus-TCP: Improper verification of the source of a communication channel in the IPv6 Router Advertisement handler in Amazon…7.7 High9.2 Critical0%Oct 16, 2026
CVE-2026-89098: Red Hat: A flaw was found in nfs-utils5.5 MediumN/A0%Oct 16, 2026
CVE-2026-111720: lhccong fish-island-backend: fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that…5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-111715: nduckmink arkon: Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated…4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111710: Netcore NR256CN: Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's…7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111678: Adri van Os antiword: Antiword through 0.37 contains a stack out-of-bounds read vulnerability in vGet8PapInfo and vGet8ChrInfo in prop8.c…3.3 Low4.8 Medium0%Oct 16, 2026
CVE-2026-111677: Adri van Os antiword: Antiword through 0.37 contains a heap out-of-bounds read vulnerability in vGet8LstInfo in prop8.c caused by an inverted…5.5 Medium6.8 Medium0%Oct 16, 2026
CVE-2026-97380: MariaDB server: MariaDB server is a community developed fork of MySQL server8.8 HighN/A1%Oct 16, 2026
CVE-2026-92262: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-86047: MariaDB server: MariaDB server is a community developed fork of MySQL server7.7 HighN/A0%Oct 16, 2026
CVE-2026-86009: Mailu: Mailu is a mail server distributed as a set of Docker imagesN/A8.2 High0%Oct 16, 2026
CVE-2026-86008: Mailu: Mailu is a mail server distributed as a set of Docker images7.2 HighN/A0%Oct 16, 2026
CVE-2026-85985: MariaDB server: MariaDB server is a community developed fork of MySQL server5.4 MediumN/A0%Oct 16, 2026
CVE-2026-85748: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85746: MariaDB server: MariaDB server is a community developed fork of MySQL server9.9 CriticalN/A1%Oct 16, 2026
CVE-2026-85745: MariaDB server: MariaDB server is a community developed fork of MySQL server4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77474: Dicklesworthstone destructive_command_guard: destructive_command_guard (dcg) is a command-line safety tool that blocks destructive shell commands before AI coding…7.1 HighN/A0%Oct 16, 2026
CVE-2026-62362: PBH-BTN PeerBanHelper: PeerBanHelper automatically blocks unwanted, leeching, and abnormal BitTorrent peers using customizable and cloud rules4.9 MediumN/A0%Oct 16, 2026
CVE-2026-59967: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists5.4 MediumN/A0%Oct 16, 2026
CVE-2026-59962: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists6.5 MediumN/A0%Oct 16, 2026
CVE-2026-57169: Finsys dockhand: Dockhand is a Docker management application9.6 CriticalN/A0%Oct 16, 2026
CVE-2026-49868: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-102693: RIOT-OS RIOT: RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded…9.6 CriticalN/A0%Oct 16, 2026
1076-1100 of 409174
‹›