The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-17073: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to obtain sensitive information due to missing subtree checks…5.4 MediumN/AN/AOct 16, 2026
CVE-2026-17068: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to bypass NFS version restrictions due to improper…5.4 MediumN/AN/AOct 16, 2026
CVE-2026-111793: Openwave Messaging (Ireland) Limited Webtop Media Transcoder: Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the…4.3 MediumN/AN/AOct 16, 2026
CVE-2026-107674: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to a denial of service to Digital Certificate Manager (DCM) for System TLS…5.1 MediumN/AN/AOct 16, 2026
CVE-2026-102917: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 is vulnerable to an authenticated attacker elevating their privilege7.8 HighN/AN/AOct 16, 2026
CVE-2025-66969: n/a: Integer overflow in OpenModSim (<=1.11.0), leading to denial of serviceN/AN/AN/AOct 16, 2026
CVE-2025-55640: n/a: A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to…N/AN/AN/AOct 16, 2026
CVE-2026-89098: Red Hat: A flaw was found in nfs-utils5.5 MediumN/AN/AOct 16, 2026
CVE-2026-81452: Dell Alienware Command Center (AWCC): Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability7.0 HighN/AN/AOct 16, 2026
CVE-2026-80092: Microsoft microsoft-identity-web: Authentication bypass by assumed-immutable data in Microsoft Identity Web allows an authorized attacker to elevate…5.3 MediumN/AN/AOct 16, 2026
CVE-2026-111723: LingGuoAI LingGuo-Drama: LingGuo-Drama through commit 8a6924a contains a missing authorization vulnerability that allows any registered user to…8.8 High8.7 HighN/AOct 16, 2026
CVE-2026-111722: LingGuoAI LingGuo-Drama: LingGuo-Drama through commit 8a6924a contains an insecure direct object reference vulnerability that allows registered…8.1 High8.6 HighN/AOct 16, 2026
CVE-2026-111721: jingsewu open-wes: Open WES through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users to modify other…5.4 Medium5.3 MediumN/AOct 16, 2026
CVE-2026-111720: lhccong fish-island-backend: fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that…5.3 Medium6.9 MediumN/AOct 16, 2026
CVE-2026-111719: roncoo roncoo-pay: Roncoo-pay through commit 9428382 contains a missing authorization vulnerability in F2FPayController.orderQuery that…5.9 Medium8.2 HighN/AOct 16, 2026
CVE-2026-111718: kuafuai aipexbase: AipexBase through commit 690adb9 contains a sql injection vulnerability that allows attackers to inject SQL through the…6.5 Medium7.1 HighN/AOct 16, 2026
CVE-2026-111717: nduckmink arkon: Arkon through 0.9.2 contains a missing authorization vulnerability in list_skill_versions that allows authenticated…4.3 Medium5.3 MediumN/AOct 16, 2026
CVE-2026-111716: nduckmink arkon: Arkon through 0.9.2 contains a broken access control vulnerability that allows authenticated employees to read and…5.4 Medium5.3 MediumN/AOct 16, 2026
CVE-2026-111715: nduckmink arkon: Arkon through 0.9.2 contains a missing authorization vulnerability in GET /api/wiki/graph that lets authenticated…4.3 Medium5.3 MediumN/AOct 16, 2026
CVE-2026-111714: AmauriC tarteaucitron.js: tarteaucitron.js before 1.37.0 contains a regular expression denial of service vulnerability that allows attackers to…3.1 Low2.3 LowN/AOct 16, 2026
CVE-2026-111713: AmauriC tarteaucitron.js: tarteaucitron.js before 1.37.0 contains a cross-site scripting vulnerability because getElemAttr resolves 'data-'…5.4 Medium5.1 MediumN/AOct 16, 2026
CVE-2026-111712: Netcore NR256CN: Netcore NR256CN through 1.5.140116 contains an authentication bypass vulnerability that allows unauthenticated…6.5 Medium6.9 MediumN/AOct 16, 2026
CVE-2026-111711: Netcore NR256CN: Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's…9.8 Critical9.3 CriticalN/AOct 16, 2026
CVE-2026-111710: Netcore NR256CN: Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's…7.5 High8.7 HighN/AOct 16, 2026
CVE-2026-111709: canove whaticket-community: WhaTicket Community through commit cf04795 contains an insecure direct object reference vulnerability that allows…5.4 Medium5.3 MediumN/AOct 16, 2026
151-175 of 413491
‹›