The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113653: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management systemN/A6.9 MediumN/AOct 20, 2026
CVE-2026-113652: apostrophecms: ApostropheCMS is an open-source Node.js content management system5.6 MediumN/AN/AOct 20, 2026
CVE-2026-113651: apostrophecms: ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library3.3 LowN/AN/AOct 20, 2026
CVE-2026-113650: apostrophecms: ApostropheCMS is an open-source Node.js content management system5.3 MediumN/AN/AOct 20, 2026
CVE-2026-113649: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system6.5 MediumN/AN/AOct 20, 2026
CVE-2026-113648: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system3.1 LowN/AN/AOct 20, 2026
CVE-2026-113505: n/a aaPanel: A flaw has been found in aaPanel up to 8.25.04.3 Medium2.1 LowN/AOct 20, 2026
CVE-2026-112958: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.4 MediumN/AN/AOct 20, 2026
CVE-2026-112957: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-95109: Eclipse Foundation Eclipse ThreadX: The Cortex-A7 MMU Modules port validates a caller-supplied buffer by translating **one address** — the first byteN/A8.5 HighN/AOct 20, 2026
CVE-2026-95108: Eclipse Foundation Eclipse ThreadX: One logical thread of a user-mode ThreadX module costs the Module Manager's shared object pool two allocations, not oneN/A6.8 MediumN/AOct 20, 2026
CVE-2026-95107: Eclipse Foundation Eclipse ThreadX: A ThreadX module chooses `object_size` when it calls `txm_module_object_allocate`N/A7.0 HighN/AOct 20, 2026
CVE-2026-94202: Eclipse Foundation Eclipse ThreadX: The Module Manager's block-pool create dispatcher proved that two `ALIGN_TYPE` words of the extra-parameter array a…N/A4.8 MediumN/AOct 20, 2026
CVE-2026-94192: Eclipse Foundation Eclipse ThreadX: A ThreadX module allocates the control blocks of its kernel objects from the Module Manager's object pool, and can ask…N/A8.5 HighN/AOct 20, 2026
CVE-2026-94024: Eclipse Foundation Eclipse ThreadX: The Module Manager's object lookup validated one byte of a memory-protected module's search name and then walked as…N/A6.9 MediumN/AOct 20, 2026
CVE-2026-94023: Eclipse Foundation Eclipse ThreadX: A ThreadX module reaches a kernel object's delete service through the Module Manager's dispatch layer, which asked one…N/A6.9 MediumN/AOct 20, 2026
CVE-2026-94018: Eclipse Foundation Eclipse ThreadX - NetX Duo: The Web add-on's HTTP server dereferences and releases an uninitialized pointer when it detects a `Content-Length`…N/A8.8 HighN/AOct 20, 2026
CVE-2026-93475: Eclipse Foundation Eclipse ThreadX - NetX Duo: The X.509 parser in NetX Secure accepts an RSA public key of any size, but every signature-verification path decrypts…N/A9.3 CriticalN/AOct 20, 2026
CVE-2026-93003: Eclipse Foundation Eclipse ThreadX - NetX Duo: The Web add-on's HTTP server searches the entire request packet for header fields instead of stopping at the end of the…N/A6.9 MediumN/AOct 20, 2026
CVE-2026-92853: Eclipse Foundation Eclipse ThreadX - NetX Duo: The TLS 1.3 Certificate-message parser in NetX Secure decrements the message length to skip a context byte without…N/A8.7 HighN/AOct 20, 2026
CVE-2026-92843: Eclipse Foundation Eclipse ThreadX - NetX Duo: A missing bounds check in the TLS 1.3 Certificate-message parser of NetX Secure lets a malicious TLS 1.3 server trigger…N/A8.7 HighN/AOct 20, 2026
CVE-2026-91057: Eclipse Foundation Eclipse ThreadX - GUIX: `_gx_multi_line_text_view_display_info_get()` reads one byte past the end of the application's text buffer when the…N/A4.6 MediumN/AOct 20, 2026
CVE-2026-90800: Apache Software Foundation Apache CouchDB: Missing authorisation checks in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows any request to read…N/A8.1 HighN/AOct 20, 2026
CVE-2026-90799: Apache Software Foundation Apache CouchDB: Unsafe binary deserialisation in chttpd in Apache CouchDB 3.5.2 and below on all platforms allows an authenticated user…N/A1.3 LowN/AOct 20, 2026
CVE-2026-90798: Apache Software Foundation Apache CouchDB: A missing circuit-breaker in the replicator in Apache CouchDB 3.5.2 and below on all platforms allows the owner of a…N/A0.6 LowN/AOct 20, 2026
2101-2125 of 417319
‹›