The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-92744: Delinea Privilege Manager: Under certain conditions, privilege manager agent allows a remote unauthenticated attacker to execute arbitrary code as…N/A8.7 HighN/AOct 29, 2026
CVE-2026-107238: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) as the LocalSystem account…N/A8.7 HighN/AOct 29, 2026
CVE-2026-107239: Veeam Management Pack for Microsoft System Center: A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution…N/A8.8 HighN/AOct 29, 2026
CVE-2023-22793: Veeam Management Pack for Microsoft System Center: A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the…N/A9.3 CriticalN/AOct 29, 2026
CVE-2026-61719: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions8.9 HighN/AN/AOct 29, 2026
CVE-2026-61707: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs9.0 CriticalN/AN/AOct 29, 2026
CVE-2026-61673: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutionsN/A6.3 MediumN/AOct 29, 2026
CVE-2026-61671: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions8.1 HighN/AN/AOct 29, 2026
CVE-2026-61654: lightdash: Lightdash is an open source business intelligence platformN/A8.3 HighN/AOct 29, 2026
CVE-2026-61645: docat-org docat: Docat is a tool for hosting versioned static documentation9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-45049: OpenIdentityPlatform OpenAM: Open Access Management (OpenAM) is an access management solution8.3 HighN/AN/AOct 29, 2026
CVE-2026-119317: Tenable, Inc. Plugin Feed: On Linux, an authenticated, low-privileged Nessus user with scan-creation rights could read arbitrary text files on the…6.5 Medium6.0 MediumN/AOct 29, 2026
CVE-2026-119286: graphql-python graphql-core: GraphQL-core is a Python port of the GraphQL.js reference implementation7.5 HighN/AN/AOct 29, 2026
CVE-2026-119285: gofiber fiber: Fiber is an Express inspired web framework written in Go5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119284: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…N/A6.9 MediumN/AOct 29, 2026
CVE-2026-119283: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…7.5 HighN/AN/AOct 29, 2026
CVE-2026-119282: nrwl, @nx: Nx is a monorepo solution for TypeScript and polyglot codebasesN/A7.3 HighN/AOct 29, 2026
CVE-2026-115943: Eval InjectionN/AN/AN/AOct 29, 2026
CVE-2026-61576: lightdash: Lightdash is an open source business intelligence platformN/A8.3 HighN/AOct 29, 2026
CVE-2026-13303: HashiCorp: HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential…8.7 HighN/AN/AOct 29, 2026
CVE-2026-119325: Bricks Bricks Theme: Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the…7.5 HighN/AN/AOct 29, 2026
CVE-2026-119281: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119280: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases3.7 LowN/AN/AOct 29, 2026
CVE-2026-119279: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119278: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
1-25 of 538495
›