The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-115380: bytecodealliance wasmtime: Wasmtime before 36.0.17, 37.0.0 before 48.0.4, and 49.0.0 before 49.0.2 contains a denial of service vulnerability in…4.0 Medium5.1 MediumN/AOct 22, 2026
CVE-2026-114643: MongoDB C# Driver: The MongoDB C# Driver writes GeoJSON extra members without checking whether their names collide with reserved GeoJSON…5.4 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115379: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a missing GC rooting vulnerability that leaves…5.7 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115378: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability in…5.8 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-115377: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-115376: lxc incus: Incus 7.0.1 before 7.0.2 and 7.2.0 before 7.5.0 contains an authorization bypass vulnerability that allows…7.7 High8.3 HighN/AOct 22, 2026
CVE-2026-115375: lxc incus: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows clients able to…9.9 Critical9.4 CriticalN/AOct 22, 2026
CVE-2026-115374: lxc incus: Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a signature verification flaw in its built-in S3 server that…7.1 High7.1 HighN/AOct 22, 2026
CVE-2026-115373: lxc incus: Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a missing authorization vulnerability in GET…6.3 Medium7.0 HighN/AOct 22, 2026
CVE-2026-115372: lxc incus: Incus from 7.3.0 before 7.5.0 contains a project restriction bypass that allows restricted project users to set…8.5 High9.0 CriticalN/AOct 22, 2026
CVE-2026-115371: lxc incus: Incus 6.0.3 before 6.0.7, 6.6.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an improper authorization vulnerability…7.1 High7.1 HighN/AOct 22, 2026
CVE-2026-115370: lxc incus: Incus 6.0.5 before 6.0.7, 6.12.0 before 7.0.2, and 7.1.0 before 7.5.0 contains a restriction bypass vulnerability that…4.3 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115369: openbao: OpenBao from 2.5.0 before 2.6.2 fails to enforce the PKI role allowed_ip_sans_cidr restriction on IP SANs taken from a…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115366: openbao: OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace…2.6 Low2.0 LowN/AOct 22, 2026
CVE-2026-115365: openbao: OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows…6.6 Medium7.5 HighN/AOct 22, 2026
CVE-2026-115364: openbao: OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115363: openbao: OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the…3.3 Low2.1 LowN/AOct 22, 2026
CVE-2026-115362: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method,…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115361: openbao: OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden…4.1 Medium2.1 LowN/AOct 22, 2026
CVE-2026-115360: openbao: OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not…4.7 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115359: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution…3.7 Low6.3 MediumN/AOct 22, 2026
CVE-2026-115358: openbao: OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into…2.0 Low2.0 LowN/AOct 22, 2026
CVE-2026-115357: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115356: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth…5.4 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115355: lepture mistune: Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read…7.5 High8.7 HighN/AOct 22, 2026
126-150 of 415107
‹›