The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-63338: inex IXP-Manager: IXP Manager is a full-stack web application for managing Internet Exchange Points8.3 HighN/AN/AOct 30, 2026
CVE-2026-63393: opensearch-project sql: OpenSearch SQL supports querying OpenSearch data using SQL and Piped Processing LanguageN/A8.7 HighN/AOct 30, 2026
CVE-2026-63378: fctr-id okta-ai-agent: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language8.8 HighN/AN/AOct 30, 2026
CVE-2026-63377: fctr-id okta-ai-agent: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language9.8 CriticalN/AN/AOct 30, 2026
CVE-2026-63346: christianhelle refitter: Refitter is a tool for generating a C# REST API client using the Refit libraryN/A8.6 HighN/AOct 30, 2026
CVE-2026-63224: openremote: OpenRemote is an open-source internet-of-things platformN/A7.2 HighN/AOct 30, 2026
CVE-2026-63201: CESNET netopeer2: Netopeer2 is a server for implementing network configuration management based on the `NETCONF` ProtocolN/A7.1 HighN/AOct 30, 2026
CVE-2026-63184: christianhelle refitter: Refitter is a tool for generating a C# REST API client using the Refit library7.1 HighN/AN/AOct 30, 2026
CVE-2026-63182: litesaml lightsaml: LightSAML implements SAML 2.0 data model classes, XML serialization and deserialization, XML security, certificate…8.1 HighN/AN/AOct 30, 2026
CVE-2026-63121: kubewarden policies: Kubewarden policies is a collection of WebAssembly policies for securing and governing Kubernetes clusters6.3 MediumN/AN/AOct 30, 2026
CVE-2026-63115: TryGhost ActivityPub: ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62347: element-hq element-call: Element Call is a native Matrix video conferencing applicationN/A5.9 MediumN/AOct 30, 2026
CVE-2026-62277: hargata lubelog: LubeLogger is a self-hosted, open-source, web-based vehicle maintenance and fuel mileage tracker6.5 MediumN/AN/AOct 30, 2026
CVE-2026-55614: openwrt uhttpd: uhttpd is a small HTTP serverN/A6.9 MediumN/AOct 30, 2026
CVE-2026-55613: openwrt uhttpd: uhttpd is a small HTTP serverN/A6.9 MediumN/AOct 30, 2026
CVE-2026-55612: openwrt uhttpd: uhttpd is a small HTTP server3.7 LowN/AN/AOct 30, 2026
CVE-2026-55147: aces Loris: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and…6.3 MediumN/AN/AOct 30, 2026
CVE-2026-55146: aces Loris: LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-16760: trailofbits fickling: In Trail of Bits fickling through 0.1.12, the _process_import() method in fickle.py adds an imported name to the…8.8 HighN/AN/AOct 30, 2026
CVE-2026-118938: trailofbits fickling: In Trail of Bits fickling through 0.1.12, a pickle STACK_GLOBAL operand carrying a dotted __qualname__ (for example…8.8 HighN/AN/AOct 30, 2026
CVE-2026-111578: Unknown PDF Invoices & Packing Slips for WooCommerce: The PDF Invoices & Packing Slips for WooCommerce WordPress plugin from 5.16.2 before 5.16.5 does not properly escape…7.5 HighN/AN/AOct 30, 2026
CVE-2026-63344: christianhelle refitter: Refitter is a tool for generating a C# REST API client using the Refit libraryN/A8.6 HighN/AOct 30, 2026
CVE-2026-63345: christianhelle refitter: Refitter is a tool for generating a C# REST API client using the Refit libraryN/A8.6 HighN/AOct 30, 2026
CVE-2026-61725: hasenbanck sevenz-rust2: sevenz-rust2 is a Rust-native 7z compressor and `decompress`or6.1 MediumN/AN/AOct 30, 2026
CVE-2026-63341: moscajs aedes: Aedes is an MQTT broker that can run on any stream server7.5 HighN/AN/AOct 30, 2026
1-25 of 418318
›