The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-115366: openbao: OpenBao from 2.3.0 before 2.6.3 contains an improper authorization vulnerability that allows privileged child-namespace…2.6 Low2.0 LowN/AOct 22, 2026
CVE-2026-115365: openbao: OpenBao from 2.3.0 before 2.6.3 contains an incorrect authorization vulnerability in its ACL policy cache that allows…6.6 Medium7.5 HighN/AOct 22, 2026
CVE-2026-115364: openbao: OpenBao before 2.6.3 contains a missing authorization check that allows attackers to stop Agent and Proxy services by…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115363: openbao: OpenBao 2.2.0 before 2.6.4 and 2.7.0 before 2.7.1 contains an information disclosure vulnerability that exposes the…3.3 Low2.1 LowN/AOct 22, 2026
CVE-2026-115362: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not check Secret ID expiration at use in the AppRole auth method,…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115361: openbao: OpenBao before 2.6.3 contains an ACL bypass vulnerability that silently drops explicit deny rules based on forbidden…4.1 Medium2.1 LowN/AOct 22, 2026
CVE-2026-115360: openbao: OpenBao before 2.6.3 contains an open redirect vulnerability in the UI's OIDC identity provider that affects users not…4.7 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115359: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 contains a flaw in its rate limit quota subsystem where role resolution…3.7 Low6.3 MediumN/AOct 22, 2026
CVE-2026-115358: openbao: OpenBao before 2.6.3 contains an information disclosure vulnerability that allows attackers to leak sensitive data into…2.0 Low2.0 LowN/AOct 22, 2026
CVE-2026-115357: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated…2.2 Low2.1 LowN/AOct 22, 2026
CVE-2026-115356: openbao: OpenBao before 2.6.4 and 2.7.x before 2.7.1 does not verify, when renewing a token issued by the Kubernetes Auth…5.4 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115355: lepture mistune: Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-114519: Roskus Prospero Flow CRM: Missing Authorization (CWE-862) in the user API of Roskus Prospero Flow CRM from 2.0.0 before 5.26.0 allows a user with…N/A8.6 HighN/AOct 22, 2026
CVE-2026-115354: lepture mistune: Mistune before 3.3.0 contains a path traversal vulnerability in the opt-in Include directive that allows attackers to…6.5 Medium7.1 HighN/AOct 22, 2026
CVE-2026-115353: lepture mistune: Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allows attackers to read…8.6 High9.2 CriticalN/AOct 22, 2026
CVE-2026-115352: lepture mistune: Mistune before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser that allows…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-115351: lepture mistune: Mistune from 3.2.1 before 3.3.0 contains a CSS injection vulnerability that allows attackers controlling markdown input…4.7 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115350: lepture mistune: Mistune before 3.3.0 contains a cross-site scripting vulnerability in the Include directive that emits included .html,…6.1 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-115349: lepture mistune: Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity denial of service vulnerability in the…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-115348: lepture mistune: Mistune from 3.0.0 before 3.3.0 contains an algorithmic complexity vulnerability in the inline link parser's…7.5 High8.7 HighN/AOct 22, 2026
CVE-2026-115347: lepture mistune: Mistune before 3.3.0 contains an inefficient algorithmic complexity vulnerability in parse_link_text that allows remote…7.5 High8.7 HighN/AOct 22, 2026
CVE-2022-51026: bytebase: Bytebase 0.12.0 before 1.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 CriticalN/AOct 22, 2026
CVE-2026-95721: Hewlett Packard Enterprise (HPE) Unknown product: No description provided3.3 LowN/AN/AOct 22, 2026
CVE-2026-95720: Hewlett Packard Enterprise (HPE) Unknown product: No description provided4.4 MediumN/AN/AOct 22, 2026
CVE-2026-95719: Hewlett Packard Enterprise (HPE) Unknown product: No description provided4.9 MediumN/AN/AOct 22, 2026
176-200 of 545063
‹›