The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112027: light0011 cms: A vulnerability was detected in light0011 cms…5.3 Medium6.9 MediumN/AOct 18, 2026
CVE-2026-112025: light0011 cms: A weakness has been identified in light0011 cms…7.3 High5.5 MediumN/AOct 18, 2026
CVE-2026-112026: light0011 cms: A security vulnerability has been detected in light0011 cms…3.7 Low6.3 MediumN/AOct 18, 2026
CVE-2026-97859: Gitea: Seven Gitea API routes under `/api/v1/users/{username}` (followers, following, following/{target}, starred,…N/AN/AN/AOct 18, 2026
CVE-2026-97204: Gitea: Deleting a label compared the ID of the repository in the request against the organization ID of organization labels,…N/AN/AN/AOct 18, 2026
CVE-2026-110494: Gitea: Adding attachments to a release checked the repository and release of an attachment but not whether it was already…N/AN/AN/AOct 18, 2026
CVE-2026-110324: Gitea: The visibility check of Gitea user profiles was applied to GET requests only, while `POST /{username}` (follow and…N/AN/AN/AOct 18, 2026
CVE-2026-110311: Gitea: Creating a draft release through the API returned an `assets` list that was built from a release without an ID, which…N/AN/AN/AOct 18, 2026
CVE-2026-109844: Gitea: `GET /api/v1/user/subscriptions` returned the metadata of every repository a user was watching without checking that…N/AN/AN/AOct 18, 2026
CVE-2026-109553: Gitea: Gitea resolved the principals of an SSH certificate by searching the content of all stored public keys instead of only…N/AN/AN/AOct 18, 2026
CVE-2026-107686: Gitea: The Gitea web handlers for adding and removing reactions on issues and comments did not refuse locked issues for users…N/AN/AN/AOct 18, 2026
CVE-2026-107618: Gitea: `POST /{owner}/{repo}/topics` was registered without the sign-in middleware that provides the cross-origin protection,…N/AN/AN/AOct 18, 2026
CVE-2026-105964: Gitea: The Gitea Actions artifact v4 (Twirp) handlers read the whole request body into memory without a size limitN/AN/AN/AOct 18, 2026
CVE-2026-105661: Gitea: Requesting `/{username}/-/repositories` for an individual user instead of an organization made the organization home…N/AN/AN/AOct 18, 2026
CVE-2026-104627: Gitea: The Gitea OpenID association callback in the security settings accepted a positive OpenID 2.0 assertion without…N/AN/AN/AOct 18, 2026
CVE-2024-4457: WSO2: The Management Console fails to properly validate input related to the configuration of JDBC user storesN/AN/AN/AOct 18, 2026
CVE-2026-111992: itsmeravitejak Online-Examination-System: A vulnerability was detected in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e24496.3 Medium2.1 LowN/AOct 18, 2026
CVE-2026-111993: Soarkey StudentManagement: A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e3.3 Low1.9 LowN/AOct 18, 2026
CVE-2026-98868: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject a kset that overruns its segment…N/AN/AN/AOct 18, 2026
CVE-2026-98867: Linux: In the Linux kernel, the following vulnerability has been resolved: dm-pcache: bound the logical key offset from…N/AN/AN/AOct 18, 2026
CVE-2026-98866: Linux: In the Linux kernel, the following vulnerability has been resolved: sched/cache: Introduce task_struct->sched_cache_grp…N/AN/AN/AOct 18, 2026
CVE-2026-98865: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't run ops.dequeue() with a DSQ lock…N/AN/AN/AOct 18, 2026
CVE-2026-98864: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…N/AN/AN/AOct 18, 2026
CVE-2026-98863: Linux: In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting…N/AN/AN/AOct 18, 2026
CVE-2026-98862: Linux: In the Linux kernel, the following vulnerability has been resolved: audit: fix exe mark UAF in kill_rules()…N/AN/AN/AOct 18, 2026
1-25 of 406803
›