The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110653: latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress: The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to…9.1 CriticalN/A0%Oct 17, 2026
CVE-2026-109208: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored…7.2 HighN/A0%Oct 17, 2026
CVE-2026-107763: hostspa Fastcache by Host.it: The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…4.3 MediumN/A0%Oct 17, 2026
CVE-2026-107762: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct…7.5 HighN/A0%Oct 17, 2026
CVE-2026-104734: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object…7.2 HighN/A0%Oct 17, 2026
CVE-2026-111855: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.17.5 HighN/A0%Oct 17, 2026
CVE-2026-111854: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.18.1 HighN/A0%Oct 17, 2026
CVE-2026-111853: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.18.8 HighN/A1%Oct 17, 2026
CVE-2026-111823: Mage mage-ai: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.9.8 CriticalN/A0%Oct 17, 2026
Red Hat: CVE-2026-89096: nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd5.9 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89088: Important priority package update for parted5.5 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89085: Important priority package update for parted6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-17591: libarchive: libarchive: use-after-free via aliased Mac metadata copy3.6 LowN/A0%Oct 16, 2026
Red Hat: CVE-2026-111802: nautilus: nautilus: Arbitrary File Deletion via Trash Symlink6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-110759: perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110758: perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace strippingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110757: perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110756: perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequencesN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110755: perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endingsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110754: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110753: perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110752: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorN/AN/A0%Oct 16, 2026
CVE-2026-107346: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 16, 2026
CVE-2026-106549: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 16, 2026
CVE-2026-96628: getarcaneapp arcane: Arcane is an interface for managing Docker containers, images, networks, and volumes4.3 MediumN/A0%Oct 16, 2026
1376-1400 of 407346
‹›