The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-116516: Mattermost: Mattermost versions <=11.9 11.1.9 11.5.8 11.10.7.0 fail to validate Zoom chat line length before slicing which allows…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-97200: benoitc hackney: Allocation of Resources Without Limits or Throttling vulnerability in hackney_conn in benoitc hackney allows a…N/A8.2 HighN/AOct 26, 2026
CVE-2026-115693: benoitc hackney: Improper Certificate Validation vulnerability in hackney_ssl in benoitc hackney allows an on-path attacker to…N/A9.1 CriticalN/AOct 26, 2026
CVE-2026-113440: benoitc hackney: Insufficiently Protected Credentials vulnerability in hackney in benoitc hackney allows a redirecting server to obtain…N/A6.0 MediumN/AOct 26, 2026
CVE-2026-115700: benoitc hackney: Interpretation Conflict vulnerability in hackney_url in benoitc hackney allows Server Side Request Forgery via a…N/A6.9 MediumN/AOct 26, 2026
CVE-2026-112880: benoitc hackney: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting') vulnerability in…N/A2.1 LowN/AOct 26, 2026
CVE-2026-116283: n/a Kameleo: A weakness has been identified in Kameleo up to 5.0.1.264.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-107656: Fortinet: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6,…9.6 CriticalN/AN/AOct 26, 2026
CVE-2026-111590: Harbor: A wide range of Harbor versions allow SSRF via its webhook delivery component which does not properly validate web hook…N/AN/AN/AOct 26, 2026
CVE-2026-108529: mtrudel bandit: Inefficient Algorithmic Complexity vulnerability in the HTTP/2 implementation of mtrudel bandit allows an…N/A8.7 HighN/AOct 26, 2026
CVE-2026-59107: WolfVision: A security vulnerability has been identified in the vSolution Matrix file sharing feature9.8 Critical9.2 CriticalN/AOct 26, 2026
CVE-2026-110499: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit…N/A8.7 HighN/AOct 26, 2026
CVE-2026-109584: mtrudel bandit: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in the HTTP/2 implementation of mtrudel…N/A8.7 HighN/AOct 26, 2026
CVE-2026-111103: mtrudel bandit: Improper Cleanup on Thrown Exception vulnerability in the HTTP/2 handler of mtrudel bandit allows an unauthenticated…N/A8.2 HighN/AOct 26, 2026
CVE-2026-111101: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/1.1 chunked body reader of mtrudel…N/A8.7 HighN/AOct 26, 2026
CVE-2026-113436: mtrudel bandit: Inefficient Algorithmic Complexity vulnerability in the header integer parser of mtrudel bandit allows an…N/A8.7 HighN/AOct 26, 2026
CVE-2026-110314: mtrudel bandit: Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit…N/A6.3 MediumN/AOct 26, 2026
CVE-2026-114213: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the WebSocket fragment reassembly of mtrudel…N/A8.7 HighN/AOct 26, 2026
CVE-2026-114216: mtrudel bandit: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in the HTTP/1.1 chunked…N/A6.3 MediumN/AOct 26, 2026
CVE-2026-115269: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit…N/A8.7 HighN/AOct 26, 2026
CVE-2026-108525: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 implementation of mtrudel bandit…N/A8.7 HighN/AOct 26, 2026
CVE-2026-116282: n/a Kameleo: A security flaw has been discovered in Kameleo up to 5.3.14.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-59106: WolfVision: A security vulnerability has been identified in the WolfProt interface implementation9.8 Critical9.3 CriticalN/AOct 26, 2026
CVE-2026-116488: NXP mcuxsdk-middleware-usb: NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains a heap buffer overflow in host audio,…6.8 Medium7.0 HighN/AOct 26, 2026
CVE-2026-116487: NXP mcuxsdk-middleware-usb: NXP MCUXpresso SDK USB middleware (mcuxsdk-middleware-usb) before 2.13.0 contains an out-of-bounds read vulnerability…4.6 Medium5.1 MediumN/AOct 26, 2026
1-25 of 546512
›