The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-19133: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized…8.1 HighN/A0%Nov 8, 2026
CVE-2026-76052: IBM: IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through…6.0 MediumN/A0%Nov 8, 2026
CVE-2026-18668: IBM Sterling File Gateway: IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-18546: IBM CockroachDB PostgreSQL for IBM VPC: IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is…5.4 MediumN/A0%Nov 8, 2026
CVE-2026-18525: IBM Secure Proxy: IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due…4.9 MediumN/A0%Nov 8, 2026
CVE-2026-18484: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-18196: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to…5.4 MediumN/A0%Nov 8, 2026
CVE-2026-18195: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to…4.2 MediumN/A0%Nov 8, 2026
CVE-2026-18194: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due…2.5 LowN/A0%Nov 8, 2026
CVE-2026-18093: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to obtain sensitive information due…7.5 HighN/A0%Nov 8, 2026
CVE-2026-17466: IBM Optim: IBM Optim 1.0.0, 1.1.0, and 1.2.0 could allow a remote authenticated attacker to obtain sensitive information due to…9.1 CriticalN/A0%Nov 8, 2026
CVE-2026-17437: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.29 could allow a local attacker to…5.5 MediumN/A0%Nov 8, 2026
CVE-2026-16699: IBM Netezza Appliance: IBM Netezza Appliance 11.3.0.2 Interim Fix 002 through 11.3.1.3 Interim Fix 006 could allow a remote authenticated…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-16433: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-16427: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to write arbitrary files due to…6.5 MediumN/A0%Nov 8, 2026
CVE-2026-16325: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary scripts…4.4 MediumN/A0%Nov 8, 2026
CVE-2026-15266: IBM Concert: IBM Concert 1.0 through 3.0.1.1 contains components that allow potentially unsafe command execution, which could be…9.8 CriticalN/A1%Nov 8, 2026
CVE-2026-14963: IBM Cognos Command Center: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a remote attacker to execute unauthorized processes due to…4.3 MediumN/A0%Nov 8, 2026
CVE-2026-14469: IBM Storage Scale Container Native and CSI: IBM Storage Scale 5.2.3.0 through 5.2.3.9 and 6.0.1.0 could allow an authenticated attacker to access and manipulate…5.4 MediumN/A0%Nov 8, 2026
CVE-2026-14434: IBM Turbonomic kubeturbo agent: IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 does not validate or improperly validates TLS certificate…5.9 MediumN/A0%Nov 8, 2026
CVE-2026-14377: IBM Turbonomic kubeturbo agent: IBM Turbonomic kubeturbo agent 8.16.0 through 8.21.2 is vulnerable to server-side request forgery (SSRF)5.4 MediumN/A0%Nov 8, 2026
CVE-2026-14375: IBM Storage Scale: IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.1.0 does not validate or improperly validates TLS certificate…5.9 MediumN/A0%Nov 8, 2026
CVE-2026-12737: IBM: IBM Sterling B2B Integrator 6.2.2.0 through 6.2.2.1_1 and IBM Sterling File Gateway 6.2.2.0 through 6.2.2.1_1 stores…4.4 MediumN/A0%Nov 8, 2026
CVE-2026-12735: IBM Controller Disclosure Management: IBM Controller Disclosure Management 1.0.0.0 could allow an attacker to obtain sensitive EXIF metadata from uploaded…4.3 MediumN/A0%Nov 8, 2026
CVE-2026-120115: IBM Aspera Connect: IBM Aspera Connect 1.6.1 through 4.2.19 fails to consistently enforce origin verification across all REST API endpoints6.3 MediumN/A0%Nov 8, 2026
276-300 of 427771
‹›