The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-95695: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security…7.4 HighN/AN/AOct 13, 2026
CVE-2026-95641: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-95640: Adobe Photoshop: Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-95639: Adobe Photoshop: Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution…8.6 HighN/AN/AOct 13, 2026
CVE-2026-95638: Adobe Photoshop: Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
CVE-2026-95637: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-95636: Adobe Photoshop: Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
CVE-2026-95635: Adobe Photoshop: Photoshop Desktop is affected by a Double Free vulnerability that could result in arbitrary code execution in the…7.8 HighN/AN/AOct 13, 2026
CVE-2026-94520: Microsoft: Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network.4.9 MediumN/AN/AOct 13, 2026
CVE-2026-94512: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-93909: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 is vulnerable by an authentication bypass…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-93905: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 could allow an unauthenticated remote attacker to…8.2 HighN/AN/AOct 13, 2026
CVE-2026-93895: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-90530: Adobe: ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.3 CriticalN/AN/AOct 13, 2026
CVE-2026-88089: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.6.7 MediumN/AN/AOct 13, 2026
CVE-2026-88088: Microsoft: Integer overflow or wraparound in SQL Server allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-88086: Microsoft: Out-of-bounds read in SQL Server allows an unauthorized attacker to disclose information over an adjacent network.5.3 MediumN/AN/AOct 13, 2026
CVE-2026-88085: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.6.4 MediumN/AN/AOct 13, 2026
CVE-2026-88084: Microsoft: Allocation of resources without limits or throttling in SQL Server allows an authorized attacker to deny service over a…5.3 MediumN/AN/AOct 13, 2026
CVE-2026-88083: Microsoft: Stack-based buffer overflow in SQL Server allows an unauthorized attacker to execute code over a network.7.5 HighN/AN/AOct 13, 2026
CVE-2026-88082: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-88081: Microsoft: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.7.7 HighN/AN/AOct 13, 2026
CVE-2026-85919: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to elevate privileges locally.7.0 HighN/AN/AOct 13, 2026
CVE-2026-85888: Microsoft: Out-of-bounds read in SQL Server allows an authorized attacker to disclose information over a network.7.7 HighN/AN/AOct 13, 2026
CVE-2026-85886: Microsoft: Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code over a network.8.5 HighN/AN/AOct 13, 2026
151-175 of 657253
‹›