The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113720: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A4.4 MediumN/AOct 20, 2026
CVE-2026-113719: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113718: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A7.1 HighN/AOct 20, 2026
CVE-2026-113717: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.3 LowN/AOct 20, 2026
CVE-2026-113716: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environments4.5 MediumN/AN/AOct 20, 2026
CVE-2026-113715: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.0 LowN/AOct 20, 2026
CVE-2026-112380: Amazon Kiro Crew: Missing authorization in the WhatsApp group channel in Kiro Crew might allow a remote actor who is a member of an…9.9 Critical9.0 CriticalN/AOct 20, 2026
CVE-2026-107692: Gaijin Entertainment War Thunder: The War Thunder game client transmits its authentication bearer token (auth_jwt) in the very first data packet after…4.8 MediumN/AN/AOct 20, 2026
CVE-2026-97406: Xerj Console API: XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token…N/AN/AN/AOct 20, 2026
CVE-2026-75997: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-75751: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-75747: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-48279: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21356: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21270: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21266: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-113810: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.0 HighN/AN/AOct 20, 2026
CVE-2026-113808: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.1 HighN/AN/AOct 20, 2026
CVE-2026-113714: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.3 LowN/AOct 20, 2026
CVE-2026-113713: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A4.4 MediumN/AOct 20, 2026
CVE-2026-113712: cachethq cachet: Cachet is an open-source status page systemN/A4.8 MediumN/AOct 20, 2026
CVE-2026-113709: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/AN/AOct 20, 2026
CVE-2026-113708: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/AN/AOct 20, 2026
CVE-2026-113643: n/a EspoCRM: A vulnerability was found in EspoCRM up to 9.3.10/10.0.104.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-111767: modelcontextprotocol typescript-sdk: MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients8.6 HighN/AN/AOct 20, 2026
1551-1575 of 407346
‹›