The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-114216: mtrudel bandit: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in the HTTP/1.1 chunked…N/A6.3 MediumN/AOct 26, 2026
CVE-2026-115269: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit…N/A8.7 HighN/AOct 26, 2026
CVE-2026-108525: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit…N/A8.7 HighN/AOct 26, 2026
CVE-2026-59106: WolfVision: A security vulnerability has been identified in the WolfProt interface implementation9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-107157: Qt: Out-of-bounds read vulnerability in QCborValue::fromCbor() impacts Qt Framework.N/A2.0 LowN/AOct 26, 2026
CVE-2026-115196: URL Redirection to Untrusted Site ('Open Redirect')5.4 MediumN/AN/AOct 26, 2026
CVE-2026-115195: Missing Authorization6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115194: A path traversal vulnerability exists in the Mautic Asset API6.5 MediumN/AN/AOct 26, 2026
CVE-2026-115193: Cross-site Scripting (XSS)8.2 HighN/AN/AOct 26, 2026
CVE-2026-115192: SQL Injection7.1 HighN/AN/AOct 26, 2026
CVE-2026-115191: SQL Injection7.1 HighN/AN/AOct 26, 2026
CVE-2026-115190: Deserialization of Untrusted Data8.0 HighN/AN/AOct 26, 2026
CVE-2026-115189: Improper Neutralization of Special Elements Used in a Template Engine8.8 HighN/AN/AOct 26, 2026
CVE-2026-115188: Code Injection9.9 CriticalN/AN/AOct 26, 2026
CVE-2026-96432: qt: A malicious or compromised HTTP/2 server withholding SETTINGS ACK can send RST_STREAM on a completed stream, planting a…N/A2.1 LowN/AOct 26, 2026
CVE-2026-94380: HAVELSAN Inc. Liman MYS: Weak Password Recovery Mechanism for Forgotten Password vulnerability in HAVELSAN Inc8.1 HighN/AN/AOct 26, 2026
CVE-2026-116263: HaschekSolutions PictShare: A flaw has been found in HaschekSolutions PictShare up to 3.7.14.6 Medium1.2 LowN/AOct 26, 2026
CVE-2026-116262: n/a libimobiledevice: A vulnerability was detected in libimobiledevice up to 1.4.05.4 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116261: n/a libimobiledevice: A security vulnerability has been detected in libimobiledevice up to 1.4.03.5 Low2.0 LowN/AOct 26, 2026
CVE-2026-116260: n/a libimobiledevice: A weakness has been identified in libimobiledevice up to 1.4.07.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-115720: frappe builder: Frappe Builder before 1.36.1 contains a server-side request forgery vulnerability in builder/api.py where the…5.0 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-115718: frappe builder: Frappe Builder versions 1.33.0 before1.36.0 contain a missing authorization vulnerability in the improve_prompt…4.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-115717: frappe builder: Frappe Builder versions before 1.36.1 contain a server-side request forgery vulnerability in the convert_to_webp API…7.7 High6.3 MediumN/AOct 26, 2026
CVE-2026-105947: Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Innotim Software,…6.5 MediumN/AN/AOct 26, 2026
CVE-2012-20006: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 26, 2026
101-125 of 546512
‹›