The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-63171: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63169: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…6.4 Medium5.3 MediumN/AOct 13, 2026
CVE-2026-63168: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63157: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63156: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-49950: xorbitsai xoscar: Xorbits Xoscar through 0.11.2 contains an unauthenticated deserialization vulnerability that allows remote attackers to…9.8 Critical9.3 CriticalN/AOct 13, 2026
CVE-2026-34634: Adobe: ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation8.6 HighN/AN/AOct 13, 2026
CVE-2026-34633: Adobe: ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation7.7 HighN/AN/AOct 13, 2026
CVE-2026-19810: Broadcom Symantec Endpoint Detection and Response: Symantec Endpoint Detection and Response (SEDR) Console, prior to 4.13, may be susceptible to a Cross-Site Scripting…5.4 MediumN/AN/AOct 13, 2026
CVE-2026-14909: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by an information disclosure…6.5 MediumN/AN/AOct 13, 2026
CVE-2026-14532: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a Reader-role attacker to obtain…4.3 MediumN/AN/AOct 13, 2026
CVE-2026-11713: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation…5.4 MediumN/AN/AOct 13, 2026
CVE-2026-108388: indico: Indico is a feature-rich event management system3.5 LowN/AN/AOct 13, 2026
CVE-2026-107371: Auth0 auth0.js: When the authorize() method is called with a maxAge parameter, the auth0.js library does not validate the auth_time…5.4 MediumN/AN/AOct 13, 2026
CVE-2026-107370: Auth0 auth0-lock: When a username for an Active Directory connection is a domain without a local part, the auth0-lock library initiates…5.3 MediumN/AN/AOct 13, 2026
CVE-2026-107369: Auth0 nextjs-auth0: The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL6.1 MediumN/AN/AOct 13, 2026
CVE-2026-106624: Adobe: ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-106623: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory7.5 HighN/AN/AOct 13, 2026
CVE-2026-106622: Adobe: ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-106621: Adobe: ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result…9.1 CriticalN/AN/AOct 13, 2026
CVE-2026-106620: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass9.6 CriticalN/AN/AOct 13, 2026
CVE-2026-106619: Adobe: ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in…9.0 CriticalN/AN/AOct 13, 2026
CVE-2026-106618: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.8 HighN/AN/AOct 13, 2026
CVE-2026-106617: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.8 HighN/AN/AOct 13, 2026
CVE-2026-106616: Adobe: ColdFusion is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could…8.6 HighN/AN/AOct 13, 2026
201-225 of 657253
‹›