The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122321: kyverno: Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification…9.1 Critical8.5 High0%Nov 5, 2026
CVE-2026-122320: kyverno: Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read…7.7 High8.3 High0%Nov 5, 2026
CVE-2026-122319: kyverno: Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to…7.5 High8.7 High0%Nov 5, 2026
CVE-2026-122318: kyverno: Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and…7.7 High7.2 High0%Nov 5, 2026
CVE-2026-122316: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background…8.5 High8.4 High0%Nov 5, 2026
CVE-2026-122315: kyverno: Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers…7.5 High8.7 High0%Nov 5, 2026
CVE-2026-122314: kyverno: Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who…7.5 High8.7 High0%Nov 5, 2026
CVE-2026-122313: kyverno: Kyverno from 1.17.0 before 1.19.2 contains a privilege escalation vulnerability that allows namespace-scoped tenants to…9.9 Critical9.4 Critical0%Nov 5, 2026
CVE-2026-122312: kyverno: Kyverno from 1.19.1 before 1.19.2 contains a namespace isolation bypass in APICall Fetch() in…7.7 High8.3 High0%Nov 5, 2026
CVE-2026-122311: kyverno: Kyverno from 1.16.0 before 1.19.2 fails to validate path segments in the resource argument of resource.get() and…9.9 Critical9.4 Critical0%Nov 5, 2026
CVE-2026-122310: kyverno: Kyverno from 1.19.1 before 1.19.2 validates a Policy's context.apiCall urlPath after cleaning it but executes the raw…9.9 Critical9.4 Critical0%Nov 5, 2026
CVE-2026-122309: kyverno: Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust…6.2 Medium8.2 High0%Nov 5, 2026
CVE-2026-122308: kyverno: Kyverno before 1.19.2 contains an authorization bypass vulnerability in the Generation Handler that allows users with…8.5 High8.4 High0%Nov 5, 2026
CVE-2026-122307: kyverno: Kyverno before 1.19.2 contains a policy bypass vulnerability in the admissionpolicygenerator controller, which folds…7.7 High8.3 High0%Nov 5, 2026
CVE-2026-122306: kyverno: Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust…7.7 High8.3 High0%Nov 5, 2026
CVE-2026-122305: kyverno: Kyverno before 1.19.2 contains a denial of service vulnerability in substituteVariablesIfAny that allows low-privileged…7.7 High8.3 High0%Nov 5, 2026
CVE-2026-122304: kyverno: Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace admins to escape…9.9 Critical9.4 Critical0%Nov 5, 2026
CVE-2026-122303: kyverno: Kyverno from 1.17.0 before 1.19.2 contains an authorization bypass vulnerability that allows namespace tenants to…9.9 Critical9.4 Critical0%Nov 5, 2026
CVE-2026-122302: kyverno: Kyverno before 1.19.2 contains a privilege escalation vulnerability that allows namespace admins to create resources…9.8 Critical9.3 Critical0%Nov 5, 2026
CVE-2026-122301: parse-community parse-server: Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object create responses to callers…3.1 Low2.3 Low0%Nov 5, 2026
CVE-2026-122189: OpenPPL ppl.nn: A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d56.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-122188: DeepGraphLearning KnowledgeGraphEmbedding: A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a6.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-122160: myshell-ai AIlice: A security vulnerability has been detected in myshell-ai AIlice up to 0.4.06.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-122159: Edge0-AI Audio8_TTS: A weakness has been identified in Edge0-AI Audio8_TTS up to 1d64afcc2da56222b41ddcf53de7b8bc54be1fb66.3 Medium2.1 Low0%Nov 5, 2026
CVE-2025-66368: Samsung Semiconductor: Incorrect handling of SDP payload leads to a Denial of ServiceN/AN/A0%Nov 5, 2026
301-325 of 423114
‹›