The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121024: AxxonSoft AxxonNet: Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows…5.4 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121023: AxxonSoft AxxonNet ARP Agent: Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before…5.5 Medium6.8 MediumN/ANov 3, 2026
CVE-2026-121022: AxxonSoft Axxon One: Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a…8.1 High9.2 CriticalN/ANov 3, 2026
CVE-2026-121021: AxxonSoft Axxon One: Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before…5.5 Medium6.8 MediumN/ANov 3, 2026
CVE-2026-121020: AxxonSoft Axxon One: Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-118448: Bitdefender pybddisasm: A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_textN/A6.9 MediumN/ANov 3, 2026
CVE-2026-118447: Bitdefender pybddisasm: A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when…N/A4.8 MediumN/ANov 3, 2026
CVE-2026-118446: Bitdefender pybddisasm: A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects,…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-118445: Bitdefender pybddisasm: A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objectsN/A6.9 MediumN/ANov 3, 2026
CVE-2026-118444: Bitdefender pybddisasm: Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during…N/A4.8 MediumN/ANov 3, 2026
CVE-2026-115231: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module…N/A8.5 HighN/ANov 3, 2026
CVE-2026-113421: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full…N/A7.3 HighN/ANov 3, 2026
CVE-2026-109161: Welotec: Insufficient bounds checking in the Digital I/O function may allow a remote attacker with high privileges to cause a…4.9 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-105982: Welotec: Improper input validation in the IPsec VPN function may allow a remote attacker with high privileges to inject system…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-105981: Welotec: Improper input validation in the Digital I/O function may allow a remote attacker with high privileges to inject…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-105980: Welotec: Improper input validation in the WireGuard VPN function may allow a remote attacker with high privileges to inject…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-105979: Welotec: Improper input validation in the ZeroTier VPN function may allow a remote attacker with high privileges to inject…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-105978: Welotec: Improper input validation in management control functions may allow a remote attacker with high privileges to inject…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-103327: Unknown CryptoCloud: The CryptoCloud WordPress plugin from 3.0.0 through 3.0.1 does not verify the authenticity of the payment notifications…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-74846: Observable Timing DiscrepancyN/AN/AN/ANov 3, 2026
CVE-2026-4052: WSO2: This issue only impacts deployments where WSO2 Identity Server is configured as a Resident Key Manager with database…9.8 CriticalN/AN/ANov 3, 2026
CVE-2026-16900: Zohocorp: Zohocorp ManageEngine Log360 and EventLog Analyzer versions 13071 and below are vulnerable to an authentication bypass…7.5 HighN/AN/ANov 3, 2026
CVE-2026-13594: Zohocorp: Zoho Corporation's ManageEngine Log360 and EventLog Analyzer versions 13062 and below are vulnerable to an issue that…9.1 CriticalN/AN/ANov 3, 2026
CVE-2026-120988: NAVER billboard.js: billboard.js before 4.1.3 allows an attacker to execute malicious JavaScript due to improper sanitization of series ids…N/AN/AN/ANov 3, 2026
CVE-2026-103653: Qt: An out-of-bounds read vulnerability in the Qt CoAP message parsing (QCoapInternalReply::createFromFrame()) of the Qt…N/A6.7 MediumN/ANov 3, 2026
276-300 of 528356
‹›