The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115738: Trellix DLP on-prem extensions: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated…N/A7.1 HighN/ANov 5, 2026
CVE-2026-119744: Cendio ThinLinc: Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that…8.8 High7.7 HighN/ANov 5, 2026
CVE-2026-97356: Apache Software Foundation Apache OFBiz: External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07…N/AN/AN/ANov 5, 2026
CVE-2026-97355: Apache Software Foundation Apache OFBiz: Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-92887: Apache Software Foundation Apache OFBiz: Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-85627: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache…N/AN/AN/ANov 5, 2026
CVE-2026-83538: Missing AuthorizationN/AN/AN/ANov 5, 2026
CVE-2026-123059: Eclipse Foundation Eclipse BaSyx Helm Charts: In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak…7.5 HighN/AN/ANov 5, 2026
CVE-2026-123028: itsourcecode Online Book Store: A vulnerability was identified in itsourcecode Online Book Store 1.07.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-123024: agentscope-ai AgentScope: A vulnerability has been found in agentscope-ai AgentScope up to 2.0.117.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-114277: Apache Software Foundation Apache OFBiz: Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBizN/AN/AN/ANov 5, 2026
CVE-2026-114272: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08…N/AN/AN/ANov 5, 2026
CVE-2026-114271: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on…N/AN/AN/ANov 5, 2026
CVE-2026-114235: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-114233: Apache Software Foundation Apache OFBiz: Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an…N/AN/AN/ANov 5, 2026
CVE-2026-114229: Apache Software Foundation Apache OFBiz: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in…N/AN/AN/ANov 5, 2026
CVE-2026-109928: Apache Software Foundation Apache OFBiz: Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-109856: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms…N/AN/AN/ANov 5, 2026
CVE-2026-109837: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all…N/AN/AN/ANov 5, 2026
CVE-2026-109129: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all…N/AN/AN/ANov 5, 2026
CVE-2026-105461: Apache Software Foundation Apache OFBiz: Missing check for ORDERMGR_UPDATE in ordermgr allows user with only ORDERMGR_VIEW permission to update ordersN/AN/AN/ANov 5, 2026
CVE-2026-105330: Apache Software Foundation Apache OFBiz: Use of Hard-coded Cryptographic Key in JWT token authentication in Apache OFBiz 24.09.06 and 24.09.07 on all platforms…N/AN/AN/ANov 5, 2026
CVE-2026-105325: Apache Software Foundation Apache OFBiz: Missing check for ACCOUNTING_UPDATE / ACCOUNTING_CREATE in accounting in allows user with only ACCOUNTING_VIEW…N/AN/AN/ANov 5, 2026
CVE-2026-105321: Kobikom Telecommunications and Informatics Services Inc. Kobikom: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom…7.5 HighN/AN/ANov 5, 2026
CVE-2026-104720: Kobikom Telecommunications and Informatics Services Inc. Kobikom: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom…7.5 HighN/AN/ANov 5, 2026
226-250 of 423114
‹›