The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-118052: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager loaders return an overflow error without…N/A6.8 MediumN/ANov 2, 2026
CVE-2025-71450: benhoyt inih: inih before r63 contains a one-byte stack buffer under-read in ini_parse_stream() in ini.c that allows attackers to…3.3 Low4.8 MediumN/ANov 2, 2026
CVE-2025-62819: n/a: Keyfactor EJBCA through 9.3.3 performs insufficient authorization checks when self-renewing a client certificate via…N/AN/AN/ANov 2, 2026
CVE-2026-120461: dromara Jpom: Jpom through 2.11.12 contains a cross-workspace authorization bypass in POST /node/ssh_command/batch that resolves…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120429: owen2345 Camaleon CMS: Camaleon CMS before 2.9.2 contains a missing authorization vulnerability in Admin::MediaController that allows…7.1 High7.1 HighN/ANov 2, 2026
CVE-2026-74993: Starnet Computer and Network Systems Inventory Tracking Application: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer…7.5 HighN/AN/ANov 2, 2026
CVE-2026-120463: sassanix Warracker: Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an…6.5 Medium6.0 MediumN/ANov 2, 2026
CVE-2026-114364: Apache Software Foundation Apache Syncope: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-113687: Apache Software Foundation Apache Syncope: Improper isolation or compartmentalization vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-113511: Apache Software Foundation Apache Syncope: Authorization bypass through User-Controlled key vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-111959: Apache Software Foundation Apache Arrow Rust: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1,…N/AN/AN/ANov 2, 2026
CVE-2026-110535: Apache Software Foundation Apache Syncope: Improper Privilege Management vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-109083: Apache Software Foundation Apache Syncope: Improper isolation or compartmentalization vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-102802: regularlabs.com: Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles…N/A8.9 HighN/ANov 2, 2026
CVE-2026-103419: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.N/A8.6 HighN/ANov 2, 2026
CVE-2026-103420: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5N/A7.2 HighN/ANov 2, 2026
CVE-2026-105600: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5N/A8.6 HighN/ANov 2, 2026
CVE-2026-105601: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5N/A5.3 MediumN/ANov 2, 2026
CVE-2026-105602: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate <…N/A8.6 HighN/ANov 2, 2026
CVE-2026-102801: regularlabs.com: Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere…N/A5.1 MediumN/ANov 2, 2026
CVE-2026-94349: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.0 HighN/AN/ANov 2, 2026
CVE-2026-92886: TÜBİTAK BİLGEM Software Technologies Research Institute eta-register: Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows…7.8 HighN/AN/ANov 2, 2026
CVE-2026-91911: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted…6.1 MediumN/AN/ANov 2, 2026
CVE-2026-91910: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted…5.7 MediumN/AN/ANov 2, 2026
CVE-2026-91909: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a…4.6 MediumN/AN/ANov 2, 2026
276-300 of 574114
‹›