The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-104736: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10 via…9.8 CriticalN/A0%Oct 17, 2026
CVE-2026-103899: daigo75 EU VAT Assistant for WooCommerce: The EU VAT Assistant for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…7.2 HighN/A0%Oct 17, 2026
CVE-2026-111602: latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress: The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to…3.7 LowN/A0%Oct 17, 2026
CVE-2026-111601: hippooo Hippoo Mobile App for WooCommerce: The Hippoo Mobile App for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…6.1 MediumN/A0%Oct 17, 2026
CVE-2026-110653: latepoint Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress: The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to…9.1 CriticalN/A0%Oct 17, 2026
CVE-2026-109208: thimpress LearnPress – WordPress LMS Plugin for Create and Sell Online Courses: The LearnPress – WordPress LMS Plugin for Create and Sell Online Courses plugin for WordPress is vulnerable to Stored…7.2 HighN/A0%Oct 17, 2026
CVE-2026-107763: hostspa Fastcache by Host.it: The Fastcache by Host.it plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…4.3 MediumN/A0%Oct 17, 2026
CVE-2026-107762: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Insecure Direct…7.5 HighN/A0%Oct 17, 2026
CVE-2026-104734: themeum: The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to PHP Object…7.2 HighN/A0%Oct 17, 2026
CVE-2026-111855: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.17.5 HighN/A0%Oct 17, 2026
CVE-2026-111854: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.18.1 HighN/A0%Oct 17, 2026
CVE-2026-111853: Tektronix 3 Series MDO: An issue was discovered on Tektronix 3 Series MDO devices before 1.21.18.8 HighN/A1%Oct 17, 2026
CVE-2026-111823: Mage mage-ai: Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.9.8 CriticalN/A0%Oct 17, 2026
Red Hat: CVE-2026-89096: nfs-utils: nfs-utils: Denial of Service via memory leak in rpc.statd5.9 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89088: Important priority package update for parted5.5 MediumN/A0%Oct 16, 2026
Amazon Linux 2023: CVE-2026-89085: Important priority package update for parted6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-17591: libarchive: libarchive: use-after-free via aliased Mac metadata copy3.6 LowN/A0%Oct 16, 2026
Red Hat: CVE-2026-111802: nautilus: nautilus: Arbitrary File Deletion via Trash Symlink6.6 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-110759: perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fields9.8 CriticalN/A0%Oct 16, 2026
Red Hat: CVE-2026-110758: perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace stripping7.5 HighN/A0%Oct 16, 2026
Red Hat: CVE-2026-110757: perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fields9.8 CriticalN/A0%Oct 16, 2026
Red Hat: CVE-2026-110756: perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequences9.8 CriticalN/A0%Oct 16, 2026
Red Hat: CVE-2026-110755: perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endings7.5 HighN/A0%Oct 16, 2026
Red Hat: CVE-2026-110754: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsing6.5 MediumN/A0%Oct 16, 2026
Red Hat: CVE-2026-110753: perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rows9.8 CriticalN/A0%Oct 16, 2026
1576-1600 of 407346
‹›