The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76292: Splunk: In Splunk Enterprise versions below 10.4.4, 10.2.8, 10.0.11, and 9.4.16, and Splunk Secure Gateway versions below…6.5 MediumN/A0%Oct 21, 2026
CVE-2026-103090: Google SAM: Missing Authentication for Critical Function (CWE-306) and Insufficiently Protected Credentials (CWE-522) in the…N/A8.8 High0%Oct 21, 2026
CVE-2026-114139: getsentry sentry-javascript: Sentry-Javascript is an official Sentry SDKs for JavaScriptN/A9.1 Critical0%Oct 21, 2026
CVE-2026-114135: jupyter-server jupyter_server: Jupyter Server is the backend for Jupyter web applications8.8 HighN/A0%Oct 21, 2026
CVE-2026-19947: zephyrproject zephyr: The device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c exposes two system calls, devmux_select_get() and…5.3 MediumN/A0%Oct 21, 2026
CVE-2026-114361: n/a HarnessRouter: A vulnerability was detected in HarnessRouter up to 0.31.105.6 Medium6.3 Medium0%Oct 21, 2026
CVE-2026-114267: SourceCodester Food Order Management System: A vulnerability was detected in SourceCodester Food Order Management System 1.07.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-105945: Apache Software Foundation Apache Pulsar: The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by…N/A7.7 High0%Oct 21, 2026
CVE-2026-105942: Apache Software Foundation Apache Pulsar: When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the…N/A7.7 High0%Oct 21, 2026
CVE-2026-105938: Apache Software Foundation Apache Pulsar: Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription…N/A2.3 Low1%Oct 21, 2026
CVE-2026-105937: Apache Software Foundation Apache Pulsar: Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's…N/A8.7 High0%Oct 21, 2026
CVE-2026-105936: Apache Software Foundation Apache Pulsar: The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed…N/A5.3 Medium0%Oct 21, 2026
CVE-2026-105935: Apache Software Foundation Apache Pulsar: The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied…N/A4.9 Medium0%Oct 21, 2026
CVE-2026-105934: Apache Software Foundation Apache Pulsar: The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE…N/A7.2 High0%Oct 21, 2026
CVE-2026-105932: Apache Software Foundation Apache Pulsar: The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy…N/A2.3 Low1%Oct 21, 2026
CVE-2026-105931: Apache Software Foundation Apache Pulsar: The Apache Pulsar broker exposes a transaction administration REST API under /admin/v3/transactionsN/A2.3 Low1%Oct 21, 2026
CVE-2026-114176: DigitalME eRoom: Missing Authorization vulnerability in DigitalME eRoom eroom-zoom-meetings-webinar allows Exploiting Incorrectly…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-112868: H5P: Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured…4.3 MediumN/A0%Oct 21, 2026
CVE-2026-105930: Apache Software Foundation Apache Pulsar: When package management is enabled, Pulsar Functions, Sources and Sinks can be registered or updated from a package…N/A6.0 Medium0%Oct 21, 2026
CVE-2026-105927: Apache Software Foundation Apache Pulsar: The Apache Pulsar WebSocket service allows a WebSocket consumer to configure a dead letter policy through query…N/A2.3 Low0%Oct 21, 2026
CVE-2026-105926: Apache Software Foundation Apache Pulsar: The Pulsar broker serves two schema commands on its binary protocol: GetSchema, which returns the schema registered for…N/A5.3 Medium0%Oct 21, 2026
CVE-2026-105869: Apache Software Foundation Apache Pulsar: Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON…N/A9.2 Critical0%Oct 21, 2026
Cisco TelePresence Video Communication Server (VCS) Expressway: CVE-2026-76435: Cisco Expressway Series Information Disclosure Vulnerability5.3 MediumN/A0%Oct 21, 2026
CVE-2026-114490: Progressive Robot Ltd hMailServer: Incorrect authorization in the COM administration API of Progressive Robot hMailServer 6.3.4 through 6.3.6 allows an…7.8 HighN/A0%Oct 21, 2026
CVE-2026-114489: Progressive Robot Ltd hMailServer: Missing authorization in the REST and COM administration APIs of Progressive Robot hMailServer 6.0.0 through 6.3.6…8.1 HighN/A0%Oct 21, 2026
101-125 of 12121
‹›