The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-99045: Linux: In the Linux kernel, the following vulnerability has been resolved: ibmveth: h_free logical LAN on open-fail after…N/AN/AN/AOct 23, 2026
CVE-2026-99019: Linux: In the Linux kernel, the following vulnerability has been resolved: scsi: ch: Do not keep references to data transfer…N/AN/AN/AOct 23, 2026
CVE-2026-98872: Linux: In the Linux kernel, the following vulnerability has been resolved: freevxfs: don't BUG() on unknown typed-extent type…N/AN/AN/AOct 23, 2026
CVE-2026-114655: MongoDB libmongocrypt: libmongocrypt builds requests to external key management services (AWS, Azure and GCP) by inserting values from key…5.9 Medium6.0 MediumN/AOct 22, 2026
CVE-2026-114650: MongoDB: A flaw in the client-side encryption support of the MongoDB .NET/C# driver can cause data designated for client-side…5.9 Medium6.9 MediumN/AOct 22, 2026
CVE-2026-92824: Red Hat: A flaw was found in libmodulemd6.2 MediumN/A0%Oct 21, 2026
CVE-2026-92823: Red Hat: A flaw was found in libmodulemd6.2 MediumN/A0%Oct 21, 2026
CVE-2026-92822: Red Hat: A flaw was found in libmodulemd6.2 MediumN/A0%Oct 21, 2026
CVE-2026-9825: IBM CyberFraud: IBM Cyber Fraud 1.0.0 through 1.0.2 has a missing secure attribute allowing sensitive cookies to be transmitted over…3.7 LowN/A0%Oct 20, 2026
CVE-2026-94402: IBM: IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting6.1 MediumN/A0%Oct 20, 2026
CVE-2026-93888: IBM Sterling Connect Direct for Unix: IBM Sterling Connect Direct for Unix 6.4.0.0 through 6.4.0.6 and 6.3.0.0 through 6.3.0.7 apnotify utility is vulnerable…7.8 HighN/A0%Oct 20, 2026
CVE-2026-93744: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow an unathenticated remote attacker to bypass security restrictions due to…6.5 MediumN/A0%Oct 20, 2026
CVE-2026-93442: IBM QRadar: IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote…8.2 HighN/A0%Oct 20, 2026
CVE-2026-93441: IBM QRadar Security Information and Event Management: IBM QRadar SIEM could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption.8.6 HighN/A0%Oct 20, 2026
CVE-2026-92559: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…9.8 CriticalN/A1%Oct 20, 2026
CVE-2026-87800: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.0.2 could allow a remote authenticated attacker to execute arbitrary code due to…6.8 MediumN/A0%Oct 20, 2026
CVE-2026-82891: IBM Guardium Data Protection: IBM Guardium Data Protection 12.1, and 12.2 could allow a remote attacker to obtain sensitive information due to use of…8.1 HighN/A0%Oct 20, 2026
CVE-2026-81212: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 allows an unauthenticated user to perform an arbitrary write into shared…10.0 CriticalN/A0%Oct 20, 2026
CVE-2026-76587: IBM Planning Analytics: IBM Planning Analytics 2.0 and 2.1 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking8.8 HighN/A1%Oct 20, 2026
CVE-2026-8355: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerable to a server-side request Forgery (SSRF) that allows…5.4 MediumN/A0%Oct 20, 2026
CVE-2026-109126: IBM: IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically…8.8 HighN/A0%Oct 20, 2026
CVE-2026-107400: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary…8.8 HighN/A0%Oct 20, 2026
CVE-2026-107366: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification8.3 HighN/A0%Oct 20, 2026
CVE-2026-105453: IBM Sterling Connect Direct for Unix: IBM Sterling Connect Direct for Unix 6.3.0.0 through 6.3.0.7 and 6.4.0.0 through 6.4.0.6 could allow a local attacker…8.4 HighN/A0%Oct 20, 2026
CVE-2026-19178: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…6.8 MediumN/A0%Oct 19, 2026
1-25 of 9776
›