The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-113597: blinkospace blinko: Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC router that allows…5.4 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-113596: webstudio-is webstudio: Webstudio before 0.256.0 contains a missing authorization vulnerability that allows authenticated users to read other…3.1 Low2.3 LowN/AOct 20, 2026
CVE-2026-113595: sharkord: Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC mutation that…4.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-113594: sharkord: Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change…5.4 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-113359: Baserow: Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated user to read field…4.3 Medium5.3 MediumN/AOct 20, 2026
CVE-2026-112956: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system6.5 MediumN/AN/AOct 20, 2026
CVE-2026-112955: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management system6.5 MediumN/AN/AOct 20, 2026
CVE-2026-112954: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112953: apostrophecms, @apostrophecms: ApostropheCMS is an open-source Node.js content management systemN/A6.0 MediumN/AOct 20, 2026
CVE-2026-112952: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system4.3 MediumN/AN/AOct 20, 2026
CVE-2026-112951: apostrophecms apostrophe: ApostropheCMS is an open-source Node.js content management system5.4 MediumN/AN/AOct 20, 2026
CVE-2026-112950: vitest-dev, @vitest: Vitest is a Vite-native testing framework for JavaScript and TypeScript projects5.9 MediumN/AN/AOct 20, 2026
CVE-2026-112949: vitest-dev, @vitest: Vitest is a Vite-native testing framework for JavaScript and TypeScript projects4.7 MediumN/AN/AOct 20, 2026
CVE-2026-112948: vitest-dev, @vitest, vitejs: Vitest is a testing framework powered by Vite6.5 MediumN/AN/AOct 20, 2026
CVE-2026-112947: vitejs: Vite is a frontend tooling framework for JavaScriptN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112946: vitejs: Vite is a frontend tooling framework for JavaScriptN/A6.3 MediumN/AOct 20, 2026
CVE-2026-112945: vitejs: Vite is a frontend tooling framework for JavaScriptN/A2.1 LowN/AOct 20, 2026
CVE-2026-112840: Brainstorm Force SureCart: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-112836: e4jvikwp VikRentCar: Cross-Site Request Forgery (CSRF) vulnerability in e4jvikwp VikRentCar vikrentcar allows Cross Site Request…8.8 HighN/AN/AOct 20, 2026
CVE-2026-112829: Arraytics Booktics: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access…5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112824: Magepeople inc. Bus Ticket Booking with Seat Reservation: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/AN/AOct 20, 2026
CVE-2026-112823: WP User Manager: Missing Authorization vulnerability in WP User Manager WP User Manager wp-user-manager allows Manipulating User…4.3 MediumN/AN/AOct 20, 2026
CVE-2026-111843: CozyThemes Rootblox: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CozyThemes…6.5 MediumN/AN/AOct 20, 2026
CVE-2026-111765: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol7.5 HighN/AN/AOct 20, 2026
CVE-2026-111764: a2aproject a2a-java: A2A Java SDK is the official Java SDK for the Agent2Agent (A2A) Protocol7.5 HighN/AN/AOct 20, 2026
2201-2225 of 417319
‹›