The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-21356: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21270: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-21266: Rejected reason: this CVE was issued in error.N/AN/AN/AOct 20, 2026
CVE-2026-113810: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.0 HighN/AN/AOct 20, 2026
CVE-2026-113808: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal7.1 HighN/AN/AOct 20, 2026
CVE-2026-113714: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A2.3 LowN/AOct 20, 2026
CVE-2026-113713: pypa virtualenv: virtualenv is a tool for creating isolated virtual python environmentsN/A4.4 MediumN/AOct 20, 2026
CVE-2026-113712: cachethq cachet: Cachet is an open-source status page systemN/A4.8 MediumN/AOct 20, 2026
CVE-2026-113709: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/AN/AOct 20, 2026
CVE-2026-113708: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/AN/AOct 20, 2026
CVE-2026-113643: n/a EspoCRM: A vulnerability was found in EspoCRM up to 9.3.10/10.0.104.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-111767: modelcontextprotocol typescript-sdk: MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients8.6 HighN/AN/AOct 20, 2026
CVE-2026-111088: Stormshield Stormshield Network Security: A Stored Cross-Site Scripting vulnerability exists in the SNS VPN log monitoring screen.6.5 MediumN/AN/AOct 20, 2026
CVE-2026-100134: Adobe Acrobat for Edge: Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…8.8 HighN/AN/AOct 20, 2026
CVE-2026-100132: Adobe Acrobat for Edge: Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory4.3 MediumN/AN/AOct 20, 2026
CVE-2026-113802: Wavlink WL-WN530BE1-A: Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54…9.8 Critical9.3 CriticalN/AOct 20, 2026
CVE-2026-113711: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system7.5 HighN/AN/AOct 20, 2026
CVE-2026-113710: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.9 MediumN/AN/AOct 20, 2026
CVE-2026-113672: argoproj argo-cd: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes9.9 CriticalN/AN/AOct 20, 2026
CVE-2026-113671: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-113670: Rejected reason: This CVE is a duplicate of another CVE.N/AN/AN/AOct 20, 2026
CVE-2026-113669: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management systemN/A5.3 MediumN/AOct 20, 2026
CVE-2026-113668: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.3 MediumN/AN/AOct 20, 2026
CVE-2026-113667: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management systemN/A5.3 MediumN/AOct 20, 2026
CVE-2026-113666: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system7.1 HighN/AN/AOct 20, 2026
1976-2000 of 417319
‹›