The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78119: zephyrproject zephyr: The Nuvoton NPCX eSPI driver parses Target-Attached-Flash (TAF) requests in espi_taf_parse()…6.3 MediumN/A0%Oct 21, 2026
CVE-2026-78118: zephyrproject zephyr: The kernel helper z_waitq_head() (kernel/include/wait_q.h) reads the head of a thread wait queue, but on SMP systems it…7.0 HighN/A0%Oct 21, 2026
CVE-2026-78117: zephyrproject zephyr: The Infineon PSOC 6 BLESS HCI driver in drivers/bluetooth/hci/hci_infineon_psoc6_bless.c stored the outgoing HCI packet…4.2 MediumN/A0%Oct 21, 2026
CVE-2026-18748: zephyrproject zephyr: The Bluetooth Classic A2DP host stores a codec Information Element (IE) in struct bt_a2dp_codec_ie, a one-byte len…3.5 LowN/A0%Oct 21, 2026
CVE-2026-78116: zephyrproject zephyr: The Broadcom AFBR-S50 time-of-flight sensor driver double-completes an RTIO submission when sensor data evaluation fails5.2 MediumN/A0%Oct 21, 2026
CVE-2026-19676: zephyrproject zephyr: The user-mode verifier for the peci_transfer() system call, z_vrfy_peci_transfer() in drivers/peci/peci_handlers.c,…7.8 HighN/A0%Oct 21, 2026
CVE-2026-105945: Apache Software Foundation Apache Pulsar: The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by…N/A7.7 High0%Oct 21, 2026
CVE-2026-105944: Apache Software Foundation Apache Pulsar Manager: Apache Pulsar Manager is a web console for administering Apache Pulsar clustersN/A10.0 Critical1%Oct 21, 2026
CVE-2026-92210: NoMachine: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability7.2 HighN/A0%Oct 21, 2026
CVE-2026-92209: NoMachine: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92208: NoMachine: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability8.8 HighN/A1%Oct 21, 2026
CVE-2026-92207: MindsDB: MindsDB OpenBBtable Code Injection Remote Code Execution Vulnerability8.8 HighN/A1%Oct 21, 2026
CVE-2026-92206: CrewAI: CrewAI crewAI Framework Agent Loading Unsafe Reflection Remote Code Execution Vulnerability8.8 HighN/A0%Oct 21, 2026
CVE-2026-92205: BusyBox: BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability6.1 MediumN/A0%Oct 21, 2026
CVE-2026-92204: Airbyte: Airbyte OneDrive Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability7.7 HighN/A0%Oct 21, 2026
CVE-2026-92203: Airbyte: Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability7.7 HighN/A0%Oct 21, 2026
CVE-2026-92202: Luxion KeyShot: Luxion KeyShot BIP File Parsing Uncontrolled Search Path Element Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-92183: GIMP: GIMP APNG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-89035: MikroTik RouterOS: MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows…7.4 High9.1 Critical0%Oct 21, 2026
CVE-2026-114493: LocalAI: LocalAI v4.6.0 through v4.11.0 contains a server-side request forgery vulnerability in core/gallery/gallery.go that…8.6 High9.2 Critical0%Oct 21, 2026
CVE-2026-114492: flipped-aurora gin-vue-admin: gin-vue-admin through 2.9.2 contains a path traversal vulnerability that allows authenticated administrators to…6.5 Medium7.0 High0%Oct 21, 2026
CVE-2026-114491: bpampuch pdfmake: pdfmake 0.3.8 before 0.3.12 fails to apply the setLocalAccessPolicy() restriction to images referenced inside SVG…5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-114265: ProjectWorlds Advanced Library Management System: A weakness has been identified in ProjectWorlds Advanced Library Management System 1.06.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114264: ProjectWorlds Advanced Library Management System: A security flaw has been discovered in ProjectWorlds Advanced Library Management System 1.04.7 Medium2.0 Low0%Oct 21, 2026
CVE-2026-114263: ProjectWorlds Advanced Library Management System: A vulnerability was identified in ProjectWorlds Advanced Library Management System 1.07.3 High5.5 Medium0%Oct 21, 2026
1101-1125 of 413321
‹›