The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-115905: zip-rs zip2: zip is a zip library for Rust that supports reading and writing simple ZIP filesN/A10.0 CriticalN/AOct 26, 2026
CVE-2026-71456: Johnson Controls Kantech Entrapass: Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto…N/A8.5 HighN/AOct 26, 2026
CVE-2026-71455: Johnson Controls Kantech Entrapass: Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows…N/A5.3 MediumN/AOct 26, 2026
CVE-2026-116596: Pyrus Pyrus Sync: Pyrus Sync for Windows contains a local privilege escalation vulnerability caused by missing authorization controls in…N/AN/AN/AOct 26, 2026
CVE-2026-93846: Mattermost: Mattermost versions 11.7.x <= 11.7.10 fail to restrict which built-in roles can be assigned to a team member via the…3.8 LowN/AN/AOct 26, 2026
CVE-2026-85297: Google Cloud Cloud Run MCP: Bucket Squatting in Google Cloud Run MCP versions prior to 1.11.0 on Google Cloud Platform allows an attacker to…N/A7.7 HighN/AOct 26, 2026
CVE-2026-65226: Rejected reason: This CVE ID has been rejected by runZero as unused.N/AN/AN/AOct 26, 2026
CVE-2026-65222: Rejected reason: The reported issue could not be reproduced, and the affected products are end-of-lifeN/AN/AN/AOct 26, 2026
CVE-2026-65221: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65218: Rejected reason: The reported issue is tracked under CVE-2026-18451N/AN/AN/AOct 26, 2026
CVE-2026-65217: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65216: Rejected reason: The reported issue is tracked under CVE-2026-18450N/AN/AN/AOct 26, 2026
CVE-2026-65215: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65214: Rejected reason: The reported issue is tracked under CVE-2026-18449N/AN/AN/AOct 26, 2026
CVE-2026-65212: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-65203: Rejected reason: The reported issue could not be reproducedN/AN/AN/AOct 26, 2026
CVE-2026-65202: Rejected reason: The reported issue was assessed as intended functionalityN/AN/AN/AOct 26, 2026
CVE-2026-116543: open5gs: Open5GS 1.3.0 through 2.8.0 contains a heap out-of-bounds write vulnerability in parse_multipart() that allows…7.5 High8.7 HighN/AOct 26, 2026
CVE-2026-116542: netty: Netty netty-tcnative before 2.0.84.Final contains an SNI hostname spoofing vulnerability that allows remote…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116541: netty: Netty netty-tcnative before 2.0.84.Final contains a denial of service vulnerability in the tcn_write_to_bytebuffer BIO…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116539: netty: Netty netty-tcnative before 2.0.84.Final contains a heap buffer overflow vulnerability in the tcn_write_to_bytebuffer…5.9 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116538: mganss HtmlSanitizer: HtmlSanitizer before 9.2.1039 and 10.0 prereleases before 10.0.1037-beta contains a cross-site scripting vulnerability…4.7 Medium2.3 LowN/AOct 26, 2026
CVE-2026-116489: timescale pgvectorscale: Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users…7.5 High7.7 HighN/AOct 26, 2026
CVE-2026-116369: Sunwood-ai-labs github-kanban-mcp-server: A vulnerability was identified in Sunwood-ai-labs github-kanban-mcp-server up to 0.4.06.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116368: DeepSeek Harness: A vulnerability was determined in DeepSeek Harness up to 0.2.0-rc.27.3 High6.9 MediumN/AOct 26, 2026
1-25 of 546512
›