The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-116113: n/a GouGuOA: A security flaw has been discovered in GouGuOA up to 6.1.26.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116112: HashenUdara edoc-doctor-appointment-system: A vulnerability was identified in HashenUdara edoc-doctor-appointment-system up to…7.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-116111: 2K Games Civilization V: A vulnerability was determined in 2K Games Civilization V 1.0.3.1446.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116110: GiantappMan LiveWallPaper: A vulnerability was found in GiantappMan LiveWallPaper 2.6.8.0 on Windows7.3 High5.5 MediumN/AOct 26, 2026
CVE-2026-116109: continuedev Continue: A vulnerability has been found in continuedev Continue 2.0.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116108: openbq-org OpenBB: A flaw has been found in openbq-org OpenBB up to 4.7.2/5.0.04.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116107: Datafeedr Product Sets Plugin: A vulnerability was detected in Datafeedr Product Sets Plugin up to 1.3.24 on WordPress5.4 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116106: n/a HeyCyan App: A security vulnerability has been detected in HeyCyan App 1.0.103 on Android7.3 High6.9 MediumN/AOct 26, 2026
CVE-2026-116105: n/a HeyCyan App: A weakness has been identified in HeyCyan App 1.0.103 on Android3.7 Low6.3 MediumN/AOct 26, 2026
CVE-2026-116104: Sony Neural Network Libraries: A security flaw has been discovered in Sony Neural Network Libraries up to 1.39.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116103: Sony Neural Network Libraries: A vulnerability was identified in Sony Neural Network Libraries up to 1.39.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116102: QuantGeekDev docker-mcp: A vulnerability was determined in QuantGeekDev docker-mcp 0.1.0/0.2.06.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116101: itsourcecode Online Cake Ordering System: A vulnerability was found in itsourcecode Online Cake Ordering System 1.06.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116100: n/a gougucms: A vulnerability has been found in gougucms up to 4.08.182.4 Low1.9 LowN/AOct 26, 2026
CVE-2026-116099: Fusion Creators Studio SCP Containment Breach Multiplayer: A flaw has been found in Fusion Creators Studio SCP Containment Breach Multiplayer up to 1.2956.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116098: SteelRaven7 Ravenfield: A vulnerability was detected in SteelRaven7 Ravenfield 254070736.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116097: n/a CloudClassroom-PHP-Project: A security vulnerability has been detected in CloudClassroom-PHP-Project4.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-107092: n/a: NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.N/AN/AN/AOct 26, 2026
CVE-2026-106781: n/a: An issue in WCH CH340/CH341 USB-to-Serial Windows Driver setup package CH341SER.EXE version 4.0 allows a local attacker…N/AN/AN/AOct 26, 2026
CVE-2026-31158: n/a: SQL Injection vulnerability in CRM SOFTTRADE Infotech (aka softtradeindia) 1.0 allows a remote attacker to execute…N/AN/AN/AOct 26, 2026
CVE-2026-36698: n/a: Xovis AG APS-R-POE, APS-R-POE-PP, APS-R, APS-R-POE-USB, and APS-B 2.10.1.1 and earlier contains an OS command injection…N/AN/AN/AOct 26, 2026
CVE-2026-116096: ggml-org llama.cpp: A weakness has been identified in ggml-org llama.cpp5.3 Medium1.9 LowN/AOct 25, 2026
CVE-2026-116095: smg-project smg: A vulnerability was identified in smg-project smg 1.7.0/1.8.0/1.9.0/1.10.0/1.10.15.3 Medium5.5 MediumN/AOct 25, 2026
CVE-2026-116094: n/a EyouCMS: A vulnerability was determined in EyouCMS up to 1.8.37.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-115627: ash-project ash_postgres: Incorrect Authorization vulnerability in ash-project ash_postgres allows a user to load destination records linked to a…N/A6.0 MediumN/AOct 25, 2026
201-225 of 546512
‹›