The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-55835: lookyloo: Lookyloo is a web interface that allows users to capture a website page and then display a tree of domains that call…N/A6.9 MediumN/AOct 23, 2026
CVE-2026-86055: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic componentsN/A8.7 HighN/AOct 23, 2026
CVE-2026-86020: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components4.6 MediumN/AN/AOct 23, 2026
CVE-2026-86019: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic componentsN/A5.3 MediumN/AOct 23, 2026
CVE-2026-86018: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic componentsN/A5.3 MediumN/AOct 23, 2026
CVE-2026-59188: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components5.4 MediumN/AN/AOct 23, 2026
CVE-2026-55600: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic componentsN/A5.7 MediumN/AOct 23, 2026
CVE-2026-54631: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components6.3 MediumN/AN/AOct 23, 2026
CVE-2026-90458: OpenStack Ironic: OpenStack Ironic before 39.0.1 allows DELETE and GET via vendor_passthru, e.g., to delete accounts from the BMC's…5.4 MediumN/AN/AOct 23, 2026
CVE-2026-54630: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic components9.6 CriticalN/AN/AOct 23, 2026
CVE-2026-54615: Part-DB Part-DB-server: Part-DB is an open source inventory management system for electronic componentsN/A6.0 MediumN/AOct 23, 2026
CVE-2026-89419: OpenStack Ironic: OpenStack Ironic before 39.0.1 sometimes allows a user to change the maintenance setting on a node via PATCH to…5.0 MediumN/AN/AOct 23, 2026
CVE-2026-115638: OpenStack Ironic: OpenStack Ironic through 39.0.1 allows a denial of service via a configdrive that results in a very large amount of…4.3 MediumN/AN/AOct 23, 2026
CVE-2026-115547: Okta Okta Access Gateway: An input validation issue in the Okta Access Gateway (OAG) Admin Console allows the processing of specially formatted…9.1 CriticalN/AN/AOct 23, 2026
CVE-2026-115546: Okta Okta Access Gateway: Okta Access Gateway (OAG) does not validate the selected authentication source during sign-on8.1 HighN/AN/AOct 23, 2026
CVE-2026-115537: gedelumbung HospitalManagement: A weakness has been identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a84.3 Medium5.3 MediumN/AOct 23, 2026
CVE-2026-19678: onPhase onPhase Forms: A server-side request forgery (SSRF) vulnerability in the unauthenticated form service in version 11.0.14 in onPhase…N/A8.7 HighN/AOct 23, 2026
CVE-2026-19677: onPhase onPhase Forms: An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an…N/A9.3 CriticalN/AOct 23, 2026
CVE-2026-115536: gedelumbung HospitalManagement: A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a84.3 Medium5.3 MediumN/AOct 23, 2026
CVE-2026-115486: Red Hat: A flaw was found in the iscsiuio component of open-iscsi7.1 HighN/AN/AOct 23, 2026
CVE-2026-115485: Red Hat: A flaw was found in the iscsiuio component of open-iscsi6.3 MediumN/AN/AOct 23, 2026
CVE-2026-115484: Red Hat: A flaw was found in the iscsiuio component of open-iscsi7.6 HighN/AN/AOct 23, 2026
CVE-2026-115535: gedelumbung HospitalManagement: A vulnerability was identified in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a82.4 Low4.8 MediumN/AOct 23, 2026
CVE-2026-115534: gedelumbung HospitalManagement: A vulnerability was determined in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a84.3 Medium5.3 MediumN/AOct 22, 2026
CVE-2026-110825: Kiloview E3 Firmware: The ONVIF device service on affected Kiloview E3 NDI encoder firmware accepts hostname, DNS, and NTP configuration…7.5 High8.7 HighN/AOct 22, 2026
1-25 of 418797
›