The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112302: kiwilan php-archive: A weakness has been identified in kiwilan php-archive up to 2.3.026.3 Medium5.3 MediumN/AOct 19, 2026
CVE-2026-112395: python-pillow Pillow: Pillow is a Python imaging library6.5 MediumN/AN/AOct 19, 2026
CVE-2026-111946: Plack::Middleware::ETag versions from 0.04 before 0.06 for Perl disclose file inode numbers in the default ETag headerN/AN/AN/AOct 19, 2026
CVE-2026-112394: python-pillow Pillow: Pillow is a Python imaging libraryN/A6.3 MediumN/AOct 19, 2026
CVE-2026-112393: python-pillow Pillow: Pillow is a Python imaging libraryN/A9.2 CriticalN/AOct 19, 2026
CVE-2026-112301: orbitale imagemagick-php: A security flaw has been discovered in orbitale imagemagick-php up to 3.3.57.3 High6.9 MediumN/AOct 19, 2026
CVE-2026-112391: python-pillow Pillow: Pillow is a Python imaging libraryN/A6.3 MediumN/AOct 19, 2026
CVE-2026-76788: zephyrproject zephyr: The OSDP Control Panel reply parser cp_decode_response() in subsys/mgmt/osdp/src/osdp_cp.c decodes replies from a…8.8 HighN/AN/AOct 19, 2026
CVE-2026-76787: zephyrproject zephyr: The UpdateHub firmware-over-the-air client parses the CoAP probe response with Zephyr's JSON library in…5.9 MediumN/AN/AOct 19, 2026
CVE-2026-112390: python-pillow Pillow: Pillow is a Python imaging libraryN/A8.2 HighN/AOct 19, 2026
CVE-2026-112300: DiffSK configobj: A vulnerability was identified in DiffSK configobj up to 5.0.95.3 Medium6.9 MediumN/AOct 19, 2026
CVE-2026-82166: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for Critical Function…8.8 HighN/AN/AOct 19, 2026
CVE-2026-71170: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability7.8 HighN/AN/AOct 19, 2026
CVE-2026-71169: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contain an Incorrect Permission Assignment for Critical Resource…7.0 HighN/AN/AOct 19, 2026
CVE-2026-112782: getgrav grav: Grav 1.7.53 before 1.7.53.5 and 2.0.0-rc.8 before 2.2.2 contains a resource exhaustion vulnerability that allows…7.5 High8.7 HighN/AOct 19, 2026
CVE-2026-112781: getgrav grav: Grav from 2.0.0 before 2.2.2 contains an information disclosure vulnerability that allows page editors to read…6.5 Medium8.7 HighN/AOct 19, 2026
CVE-2026-112780: getgrav grav: Grav from 2.0.15 before 2.2.2 contains an allowlist bypass vulnerability that allows page editors to call arbitrary…8.8 High9.3 CriticalN/AOct 19, 2026
CVE-2026-112779: getgrav grav-plugin-api: Grav API plugin (grav-plugin-api) 1.0.40 before 1.0.42 caches a full translation dictionary for every well-formed…9.8 Critical9.3 CriticalN/AOct 19, 2026
CVE-2026-112778: traefik: Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in…N/A6.4 MediumN/AOct 19, 2026
CVE-2026-112777: craftcms cms: Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its…7.2 High8.7 HighN/AOct 19, 2026
CVE-2026-112776: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains an authorization bypass vulnerability that allows site-scoped GraphQL…9.8 Critical9.3 CriticalN/AOct 19, 2026
CVE-2026-112775: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse…7.5 High8.7 HighN/AOct 19, 2026
CVE-2026-112774: craftcms cms: Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated…7.2 High8.7 HighN/AOct 19, 2026
CVE-2026-112773: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…8.8 High8.7 HighN/AOct 19, 2026
CVE-2026-112772: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…8.8 High8.7 HighN/AOct 19, 2026
1-25 of 409174
›