The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109122: Kiloview E3 Firmware: The network management service on affected Kiloview E3 NDI encoder firmware fails to sanitize one field used when…9.1 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-110063: Microsoft VM Inspector for Azure Virtual Machines: Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an…10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-83938: Microsoft Azure Kubernetes Configuration Service: Missing authentication for critical function in Azure Kubernetes Configuration Service allows an unauthorized attacker…10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-96185: Microsoft Microsoft Exchange Online: Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.7.5 HighN/AN/AOct 22, 2026
CVE-2026-97785: Microsoft Microsoft Entra application proxy: Improper authentication in AAD App Proxy allows an unauthorized attacker to elevate privileges over a network.10.0 CriticalN/AN/AOct 22, 2026
CVE-2026-108456: Microsoft Azure AI Foundry: Server-side request forgery (ssrf) in Azure AI Foundry allows an authorized attacker to elevate privileges over a…7.7 HighN/AN/AOct 22, 2026
CVE-2026-105014: Microsoft Azure Pipelines: Improper neutralization of special elements used in a command ('command injection') in Azure Pipelines allows an…9.1 CriticalN/AN/AOct 22, 2026
CVE-2026-111594: InterSystems IRIS for Health: InterSystems IRIS for Health has TLS/SSL encryption turned off by default, which may enable an attacker to view…8.1 High9.2 CriticalN/AOct 22, 2026
CVE-2026-114620: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers5.4 MediumN/AN/AOct 22, 2026
CVE-2026-114619: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers4.6 MediumN/AN/AOct 22, 2026
CVE-2026-114618: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers6.8 MediumN/AN/AOct 22, 2026
CVE-2026-114617: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers4.2 MediumN/AN/AOct 22, 2026
CVE-2026-115449: Red Hat: A flaw was found in libslirp3.5 LowN/AN/AOct 22, 2026
CVE-2026-114616: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers7.4 HighN/AN/AOct 22, 2026
CVE-2026-115221: Red Hat: A flaw was found in FreeIPA5.4 MediumN/AN/AOct 22, 2026
CVE-2026-115424: Red Hat Red Hat OpenShift Container Platform 4: A flaw was found in the OpenShift client oc5.5 MediumN/AN/AOct 22, 2026
CVE-2026-114615: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers7.4 HighN/AN/AOct 22, 2026
CVE-2026-114614: authlib: Authlib is a Python library which builds OAuth and OpenID Connect servers2.6 LowN/AN/AOct 22, 2026
CVE-2026-114583: Python Software Foundation CPython: tarfile.tar_filter could be bypassed using crafted link entries, including symlinks with empty or directory-like names,…N/A6.9 MediumN/AOct 22, 2026
CVE-2026-114625: Arista Networks VeloCloud Orchestrator: VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-115417: AWS aws-c-mqtt: Memory allocation with excessive size value in the MQTT 3.1.1 compatibility adapter in AWS aws-c-mqtt before 0.16.2…7.5 High8.2 HighN/AOct 22, 2026
CVE-2026-115419: AWS: The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for…8.1 High8.6 HighN/AOct 22, 2026
CVE-2026-112332: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains an uncaught exception vulnerability in JsonNetDeserializer.Deserialize that allows a…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-112331: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains a denial-of-service vulnerability that allows a remote attacker who can produce…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-112330: GDATASoftwareAG motornet: Motor.NET before 0.19.0 contains a denial of service vulnerability that allows a remote attacker who can publish to a…7.5 High8.7 HighN/AOct 22, 2026
101-125 of 545063
‹›