The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-28330: SolarWinds SolarWinds Observability Self-Hosted: SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that…4.6 MediumN/AN/AOct 20, 2026
CVE-2026-28329: SolarWinds SolarWinds Observability Self-Hosted: SolarWinds Observability Self-Hosted was found to be affected by a Server-Side Request Forgery (SSRF) vulnerability…6.4 MediumN/AN/AOct 20, 2026
CVE-2026-28328: SolarWinds SolarWinds Observability Self-Hosted: SolarWinds Observability Self-Hosted was found to be affected by a broken authorization schema that can allow…8.8 HighN/AN/AOct 20, 2026
CVE-2026-113658: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system7.5 HighN/AN/AOct 20, 2026
CVE-2026-113657: apostrophecms: ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…3.7 LowN/AN/AOct 20, 2026
CVE-2026-113656: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system5.3 MediumN/AN/AOct 20, 2026
CVE-2026-113655: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-113654: apostrophecms: ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…N/A5.3 MediumN/AOct 20, 2026
CVE-2026-113653: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management systemN/A6.9 MediumN/AOct 20, 2026
CVE-2026-113652: apostrophecms: ApostropheCMS is an open-source Node.js content management system5.6 MediumN/AN/AOct 20, 2026
CVE-2026-113651: apostrophecms: ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library3.3 LowN/AN/AOct 20, 2026
CVE-2026-113650: apostrophecms: ApostropheCMS is an open-source Node.js content management system5.3 MediumN/AN/AOct 20, 2026
CVE-2026-113649: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system6.5 MediumN/AN/AOct 20, 2026
CVE-2026-113648: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system3.1 LowN/AN/AOct 20, 2026
CVE-2026-113505: n/a aaPanel: A flaw has been found in aaPanel up to 8.25.04.3 Medium2.1 LowN/AOct 20, 2026
CVE-2026-112958: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.4 MediumN/AN/AOct 20, 2026
CVE-2026-112957: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-95109: Eclipse Foundation Eclipse ThreadX: The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byteN/A8.5 HighN/AOct 20, 2026
CVE-2026-95108: Eclipse Foundation Eclipse ThreadX: One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not oneN/A6.8 MediumN/AOct 20, 2026
CVE-2026-95107: Eclipse Foundation Eclipse ThreadX: A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`N/A7.0 HighN/AOct 20, 2026
CVE-2026-94202: Eclipse Foundation Eclipse ThreadX: The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a…N/A4.8 MediumN/AOct 20, 2026
CVE-2026-94192: Eclipse Foundation Eclipse ThreadX: A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask…N/A8.5 HighN/AOct 20, 2026
CVE-2026-94024: Eclipse Foundation Eclipse ThreadX: The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as…N/A6.9 MediumN/AOct 20, 2026
CVE-2026-94023: Eclipse Foundation Eclipse ThreadX: A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one…N/A6.9 MediumN/AOct 20, 2026
CVE-2026-94018: Eclipse Foundation Eclipse ThreadX - NetX Duo: The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length`…N/A8.8 HighN/AOct 20, 2026
1576-1600 of 407346
‹›