The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110285: Unknown WP Stripe Checkout: The WP Stripe Checkout WordPress plugin before 1.2.2.62 does not verify the Stripe webhook signature when no signing…N/AN/AN/AOct 25, 2026
CVE-2025-15705: Unknown Contact Form by Supsystic: The Contact Form by Supsystic WordPress plugin before 1.8.0 does not sanitise and escape a form name, allowing users…N/AN/AN/AOct 25, 2026
CVE-2026-116007: YunaiV, zhijiantianya ruoyi-vue-pro: A flaw has been found in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.093.7 Low2.9 LowN/AOct 25, 2026
CVE-2026-116006: YunaiV, zhijiantianya ruoyi-vue-pro: A vulnerability was detected in YunaiV/zhijiantianya ruoyi-vue-pro up to 2026.097.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-116004: onyx-dot-app Onyx: A security vulnerability has been detected in onyx-dot-app Onyx up to 5.0.03.5 Low2.0 LowN/AOct 25, 2026
CVE-2026-116000: Zylon PrivateGPT: A security flaw has been discovered in Zylon PrivateGPT 1.0.0/1.0.17.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-115999: mansi-k Restaurant_IMS: A vulnerability has been found in mansi-k Restaurant_IMS d7ad49f61ab7cc1ec6eb359ac2b5378bdbde06947.3 High6.9 MediumN/AOct 25, 2026
CVE-2026-115997: pig-mesh pig: A flaw has been found in pig-mesh pig up to 4.1.06.3 Medium2.1 LowN/AOct 25, 2026
CVE-2026-89284: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 24, 2026
CVE-2026-115996: Unitree Robotics Unitree Go2: A vulnerability was detected in Unitree Robotics Unitree Go2 up to 1.1.13/1.1.14.1/1.1.15.13.7 Low6.3 MediumN/AOct 24, 2026
CVE-2026-115995: Unitree Robotics Unitree Go2: A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.49.6 Critical9.4 CriticalN/AOct 24, 2026
CVE-2026-111326: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 24, 2026
CVE-2026-109111: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 24, 2026
CVE-2026-115982: n/a phpIPAM: A vulnerability was detected in phpIPAM up to 1.8.34.3 Medium2.1 LowN/AOct 24, 2026
CVE-2026-115981: n/a phpIPAM: A security vulnerability has been detected in phpIPAM up to 1.8.32.4 Low1.9 LowN/AOct 24, 2026
CVE-2026-115973: FaveoSuite Faveo Helpdesk: A vulnerability was identified in FaveoSuite Faveo Helpdesk 2.0.37.3 High6.9 MediumN/AOct 24, 2026
CVE-2026-114820: Oracle Corporation: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java…9.1 CriticalN/AN/AOct 24, 2026
CVE-2026-115972: FaveoSuite Faveo Helpdesk: A vulnerability was determined in FaveoSuite Faveo Helpdesk up to 2.0.35.3 Medium6.9 MediumN/AOct 24, 2026
CVE-2026-115971: Travisun Opptrix: A vulnerability was found in Travisun Opptrix 0.4.05.3 Medium5.5 MediumN/AOct 24, 2026
CVE-2026-115970: Travisun Opptrix: A vulnerability has been found in Travisun Opptrix 0.4.07.3 High5.5 MediumN/AOct 24, 2026
CVE-2026-115969: Travisun Opptrix: A flaw has been found in Travisun Opptrix 0.4.07.3 High5.5 MediumN/AOct 24, 2026
CVE-2026-115933: GitroomHQ postiz-app: Postiz signs its session, invitation and password reset tokens with one shared secret and without any marker of what a…9.9 CriticalN/AN/AOct 24, 2026
CVE-2026-114704: Christoph Vielgrader Relevanssi: Deserialization of Untrusted Data vulnerability in Christoph Vielgrader Relevanssi relevanssi allows Object…7.2 HighN/AN/AOct 24, 2026
CVE-2026-114629: Memory Allocation with Excessive Size ValueN/AN/AN/AOct 24, 2026
CVE-2026-114192: Magepeople inc. WpEvently: Missing Authorization vulnerability in Magepeople inc6.5 MediumN/AN/AOct 24, 2026
126-150 of 537999
‹›