The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-77684: zephyrproject zephyr: The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT…5.7 MediumN/AN/AOct 19, 2026
CVE-2026-19595: zephyrproject zephyr: The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two…6.1 MediumN/AN/AOct 19, 2026
CVE-2026-19178: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized…6.8 MediumN/AN/AOct 19, 2026
CVE-2026-112991: MISP MISP Modules: The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in…N/A6.3 MediumN/AOct 19, 2026
CVE-2026-112372: H3C Magic NX15: A weakness has been identified in H3C Magic NX15 V100R0176.6 Medium2.0 LowN/AOct 19, 2026
CVE-2026-112371: H3C Magic NX15: A vulnerability was determined in H3C Magic NX15 NX15V100R0179.9 Critical8.6 HighN/AOct 19, 2026
CVE-2026-112370: H3C Magic NX15: A vulnerability was found in H3C Magic NX15 100R0179.9 Critical8.6 HighN/AOct 19, 2026
CVE-2025-36252: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM TS4500 Tape Library/Diamondback Tape Library does not…6.3 MediumN/AN/AOct 19, 2026
CVE-2025-36069: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 does not invalidate session after a logout which could allow an…5.5 MediumN/AN/AOct 19, 2026
CVE-2025-36061: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 IBM Diamondback Tape Library and IBM Storage TS4500 Library could…6.5 MediumN/AN/AOct 19, 2026
CVE-2026-112373: H3C Magic NX15: A security vulnerability has been detected in H3C Magic NX15 NX15V100R0176.5 Medium7.1 HighN/AOct 19, 2026
CVE-2026-57529: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57528: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57526: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57519: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57515: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57514: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57513: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-57512: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-56714: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 19, 2026
CVE-2026-53995: mlflow: MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows…8.2 High8.8 HighN/AOct 19, 2026
CVE-2026-112901: python-pillow Pillow: Pillow is a Python imaging libraryN/A6.9 MediumN/AOct 19, 2026
CVE-2026-112900: python-pillow Pillow: Pillow is a Python imaging libraryN/A9.2 CriticalN/AOct 19, 2026
CVE-2026-112898: python-pillow Pillow: Pillow is a Python imaging libraryN/A6.9 MediumN/AOct 19, 2026
CVE-2026-112897: python-pillow Pillow: Pillow is a Python imaging libraryN/A8.7 HighN/AOct 19, 2026
1-25 of 409174
›