The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114129: uhop stream-json: stream-json is a micro-library of stream components for processing JSON and JSONC with a minimal memory footprint6.2 MediumN/A0%Oct 21, 2026
CVE-2026-114128: withastro astro: Astro is a web framework for content-driven websites6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114127: withastro astro: Astro is a web framework for content-driven websitesN/A2.3 Low0%Oct 21, 2026
Red Hat: CVE-2026-114126: storybook: storybook: Arbitrary code execution via exposed WebSocket authentication tokenN/A8.7 High0%Oct 21, 2026
Red Hat: CVE-2026-114125: storybook: Storybook: Arbitrary code execution via insufficient message-origin restrictionsN/A8.6 High0%Oct 21, 2026
CVE-2026-114124: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.9 LowN/A0%Oct 21, 2026
CVE-2026-112868: H5P: Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-111184: NoMachine: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability7.8 HighN/A0%Oct 21, 2026
CVE-2026-111183: GStreamer: GStreamer rtpL16depay Heap-based Buffer Overflow Remote Code Execution Vulnerability9.8 CriticalN/A1%Oct 21, 2026
CVE-2026-110744: Red Hat Multicluster Global Hub: A flaw was found in multicluster-global-hub-operator-bundle7.2 HighN/A0%Oct 21, 2026
CVE-2026-105930: Apache Software Foundation Apache Pulsar: When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package…N/A6.0 Medium0%Oct 21, 2026
CVE-2026-105927: Apache Software Foundation Apache Pulsar: The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query…N/A2.3 Low0%Oct 21, 2026
CVE-2026-105926: Apache Software Foundation Apache Pulsar: The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for…N/A5.3 Medium0%Oct 21, 2026
CVE-2026-105869: Apache Software Foundation Apache Pulsar: Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON…N/A9.2 Critical0%Oct 21, 2026
CVE-2026-76524: Cisco Cisco Open Source Snort3: A vulnerability in the control channel socket implementation of Open Source Snort 3 could allow an authenticated,…7.8 HighN/A0%Oct 21, 2026
Cisco IOS-XR: CVE-2026-76505: Cisco IOS XR Software for ASR 9000 Series Routers IPv4 Unicast Packets Denial of Service Vulnerability7.5 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76497: Cisco Expressway Series Security Hardening Release: October 20266.6 MediumN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76496: Cisco Expressway Series Security Hardening Release: October 20267.0 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76495: Cisco Expressway Series Security Hardening Release: October 20267.8 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76494: Cisco Expressway Series Security Hardening Release: October 20267.8 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76493: Cisco Expressway Series Security Hardening Release: October 20267.5 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76492: Cisco Expressway Series Security Hardening Release: October 20267.5 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76491: Cisco Expressway Series Security Hardening Release: October 20267.5 HighN/A0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76490: Cisco Expressway Series Security Hardening Release: October 20268.6 HighN/A0%Oct 21, 2026
CVE-2026-76489: Cisco: Multiple Cisco products are affected by a vulnerability in the memory management implementation of Snort 3 that could…5.8 MediumN/A0%Oct 21, 2026
1201-1225 of 413119
‹›