The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-96628: getarcaneapp arcane: Arcane is an interface for managing Docker containers, images, networks, and volumes4.3 MediumN/A0%Oct 16, 2026
CVE-2026-96627: getarcaneapp arcane: Arcane is an interface for managing Docker containers, images, networks, and volumes8.8 HighN/A0%Oct 16, 2026
CVE-2026-96626: Exposure of Sensitive Information8.5 HighN/A0%Oct 16, 2026
Red Hat: CVE-2026-62439: gimp: gimp: file-pvr Plug-in PVR File Parsing Integer Overflow Heap-based Buffer Overflow Vulnerability7.0 HighN/A0%Oct 16, 2026
Red Hat: CVE-2026-62438: gimp: gimp: PAA integer overflow out-of-bounds read6.1 MediumN/A0%Oct 16, 2026
CVE-2026-49410: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.1 HighN/A0%Oct 16, 2026
CVE-2026-111044: Sunshine is a self-hosted game stream host for Moonlight7.6 HighN/A0%Oct 16, 2026
CVE-2026-108372: Origin Validation ErrorN/A7.1 High0%Oct 16, 2026
Red Hat: CVE-2026-110759: perl-text-csv_xs: Text::CSV_XS: Data corruption via trailing carriage return in empty fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110758: perl-text-csv_xs: Text::CSV_XS: Denial of Service via out-of-bounds write during whitespace strippingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110757: perl-text-csv_xs: Text::CSV_XS: CSV record splitting via unquoted numeric fieldsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110756: perl-text-csv_xs: Text::CSV_XS: Data corruption via invalid UTF-8 byte sequencesN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110755: perl-text-csv_xs: Text::CSV_XS: Denial of Service via crafted carriage return line endingsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110754: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via memory leak during malformed CSV parsingN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110753: perl-text-csv_xs: perl-text-csv_xs: Denial of Service via use-after-free when parsing empty rowsN/AN/A0%Oct 16, 2026
Red Hat: CVE-2026-110752: perl-Text-CSV_XS: perl-Text-CSV_XS: Denial of Service via excessive memory allocation in fragment selectorN/AN/A0%Oct 16, 2026
CVE-2026-96542: Electronic Arts EA Javelin Anticheat (EA Javelin Anticheat Installer): Incorrect permission assignment (CWE-732) in the standalone installer for EA Javelin Anticheat (versions 1.0.14329371,…5.0 MediumN/A0%Oct 16, 2026
CVE-2026-64862: frappe hrms: Frappe HR is an open-source human resources management solution (HRMS)6.5 MediumN/A0%Oct 16, 2026
CVE-2026-55796: Frappe HR is an open-source human resources management solution (HRMS)6.5 MediumN/A0%Oct 16, 2026
CVE-2026-108374: frappe erpnext: ERPNext is a free and open source Enterprise Resource Planning tool7.7 HighN/A0%Oct 16, 2026
CVE-2026-108373: frappe erpnext: ERPNext is a free and open source Enterprise Resource Planning tool6.5 MediumN/A0%Oct 16, 2026
FreeBSD: VID-0cb42b4a-9f19-11f1-a655-3497f65b111b (CVE-2026-68498): jackson-core -- StreamReadConstraints can be bypassed7.5 HighN/A1%Oct 16, 2026
CVE-2026-96620: anthropics claude-agent-sdk-python: Claude Agent SDK is a Python SDK for Claude CodeN/A9.2 Critical1%Oct 16, 2026
CVE-2026-61726: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists8.1 HighN/A0%Oct 16, 2026
CVE-2026-59970: TandoorRecipes recipes: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists7.7 HighN/A0%Oct 16, 2026
1576-1600 of 407346
‹›