The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-46347: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser6.8 MediumN/A0%Oct 23, 2026
CVE-2026-46346: intranda goobi-viewer-core: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser6.5 MediumN/A0%Oct 23, 2026
FreeBSD: VID-9647af6d-7a05-11f1-99fc-40b034429ecf (CVE-2026-39902): cacti -- multiple vulnerabilities7.2 HighN/A0%Oct 23, 2026
CVE-2026-115478: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaultsN/A7.1 High0%Oct 23, 2026
CVE-2026-115477: The-40-Thieves obsidian-tc: obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaultsN/A7.1 High0%Oct 23, 2026
CVE-2026-112333: GFI Software GFI Archiver: GFI Archiver before 15.14 contains a stored cross-site scripting vulnerability in the MailInsights scheduled report…5.4 Medium5.1 Medium0%Oct 23, 2026
CVE-2026-106765: n/a: An issue in @rog0x/mcp-docker-tools 1.0.1 allows a remote attacker to execute arbitrary code via the handleImageList…7.5 HighN/A1%Oct 23, 2026
CVE-2026-106764: n/a: An issue in @rog0x/mcp-git-tools 1.0.1 allows a remote attacker to execute arbitrary code via the resolveBaseBranch…7.5 HighN/A1%Oct 23, 2026
CVE-2026-106763: n/a: An issue in @justice8096/sagemath-mcp-server 1.0.1 allows a remote attacker to execute arbitrary code via the…7.5 HighN/A1%Oct 23, 2026
CVE-2026-102786: phoca.cz Phoca Gallery extension for Joomla: Joomla Extension - phoca.cz - Authenticated stored cross-site scripting through HTML attribute injection in Phoca…N/A8.6 High0%Oct 23, 2026
CVE-2026-93640: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the optional dnscache package of Zimbra Collaboration Suite (ZCS) allows…7.8 HighN/A0%Oct 23, 2026
CVE-2026-57208: entireio cli: Entire CLI hooks into Git workflows to capture AI agent sessionsN/A6.2 Medium0%Oct 23, 2026
CVE-2026-57207: netboxlabs netbox-mcp-server: NetBox MCP Server is a simple read-only Model Context Protocol server for NetBox5.9 MediumN/A0%Oct 23, 2026
CVE-2026-55826: stape-io gtm-server-side-wordpress-plugin: The GTM Server Side plugin by stape.io implements server-side tracking on WordPress websitesN/A8.7 High0%Oct 23, 2026
CVE-2026-55606: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt6.5 MediumN/A0%Oct 23, 2026
CVE-2026-53921: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-53920: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrtN/A8.7 High0%Oct 23, 2026
CVE-2026-53918: openwrt odhcpd: odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrtN/A8.8 High1%Oct 23, 2026
CVE-2026-50057: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the Zimbra Collaboration Suite (ZCS) MTA package allows the Unix zimbra…7.8 HighN/A0%Oct 23, 2026
CVE-2026-50056: Zimbra Zimbra Collaboration Suite: A local privilege escalation vulnerability in the zmmailboxdmgr launcher of Zimbra Collaboration Suite (ZCS) allows the…7.8 HighN/A0%Oct 23, 2026
CVE-2026-115785: Zimbra Zimbra Collaboration Suite: An SMTP command injection vulnerability in the data-source testing functionality of Zimbra Collaboration Suite (ZCS)…4.3 MediumN/A1%Oct 23, 2026
CVE-2026-115754: yahoo serialize-javascript: serialize-javascript from 7.0.1 before 7.1.3 contains a cross-site scripting vulnerability that allows attackers to…4.7 Medium2.3 Low0%Oct 23, 2026
CVE-2026-115481: baserproject basercms: baserCMS is a website development frameworkN/A8.5 High0%Oct 23, 2026
CVE-2026-115480: baserproject basercms: baserCMS is a website development framework5.3 MediumN/A0%Oct 23, 2026
CVE-2026-115479: baserproject basercms: baserCMS is a website development framework5.3 MediumN/A0%Oct 23, 2026
2451-2475 of 413066