The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112957: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-112952: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-113680: harfbuzz: HarfBuzz from 8.0.0 through 14.6.0 contains a NULL pointer dereference vulnerability in the experimental WebAssembly…5.5 Medium6.8 MediumN/AOct 20, 2026
CVE-2026-113613: FlexGet: FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to…8.1 High9.2 CriticalN/AOct 20, 2026
CVE-2026-113608: jleyva moodle-block_configurablereports: Configurable Reports block for Moodle (moodle-block_configurablereports) before 5.3.1 contains an sql injection…5.3 Medium6.0 MediumN/AOct 20, 2026
CVE-2026-113603: x402-foundation: The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.25.0, and Go module…6.5 Medium6.9 MediumN/AOct 20, 2026
CVE-2026-113598: modoboa: Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenticated users to…4.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-113359: Baserow: Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field…4.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-97400: Eclipse Foundation Eclipse OpenJ9: In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent…N/A6.8 MediumN/AOct 20, 2026
CVE-2026-96402: Eclipse Foundation Eclipse ThreadX - USBX: A malicious USB MTP/PTP device can cause the USBX host to read past a heap buffer during ordinary object enumeration,…N/A5.2 MediumN/AOct 20, 2026
CVE-2026-95168: n/a: An issue in nvbn thefuck v.3.32 allows a local attacker to execute arbitrary code via the get_rules_import_paths in…N/AN/AN/AOct 20, 2026
CVE-2026-95111: Eclipse Foundation Eclipse ThreadX: A memory-protected ThreadX module's queue request reaches the Module Manager's dispatch layer, which decides how much…N/A4.8 MediumN/AOct 20, 2026
CVE-2026-92454: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX software JPEG decoder reads four kinds of marker segment without checking that each is long enough to hold…6.1 Medium6.8 MediumN/AOct 20, 2026
CVE-2026-92449: Eclipse Foundation Eclipse ThreadX - GUIX: `_gx_binres_pixelmap_table_load()` in the GUIX binary resource (theme) loader indexes the pixelmap table with a value…N/A6.8 MediumN/AOct 20, 2026
CVE-2026-92446: Eclipse Foundation Eclipse ThreadX - GUIX: `gx_binres_theme_load()` and `gx_binres_font_load()` take the resource as a bare `GX_UBYTE *` with no length, and…N/A6.8 MediumN/AOct 20, 2026
Debian: CVE-2026-92162: flatpak -- security updateN/A7.2 HighN/AOct 20, 2026
CVE-2026-91189: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX binary resource loader never checks that a font page's glyph range is well formedN/A7.1 HighN/AOct 20, 2026
CVE-2026-91186: Eclipse Foundation Eclipse ThreadX - GUIX: The PNG chunk reader has no notion of chunk orderingN/A8.4 HighN/AOct 20, 2026
CVE-2026-91059: Eclipse Foundation Eclipse ThreadX - GUIX: The GUIX JPEG software decoder enforces no ordering on JPEG markersN/A6.8 MediumN/AOct 20, 2026
CVE-2026-113466: n/a MinIO: A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z5.3 Medium5.5 MediumN/AOct 20, 2026
CVE-2026-113411: Nerimity Desktop: A vulnerability was found in Nerimity Desktop up to 2.2.26.3 Medium2.1 LowN/AOct 20, 2026
CVE-2026-113397: DrayTek Vigor2960: A security vulnerability has been detected in DrayTek Vigor2960 1.5.1.6 Revision 82187.4 High2.1 LowN/AOct 20, 2026
CVE-2026-112944: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112943: vitejs: launch-editor allows users to open files with line numbers in editor from Node.jsN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112941: tox-dev filelock: filelock is a platform-independent file lock for Python3.3 LowN/AN/AOct 20, 2026
2051-2075 of 417319
‹›