The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123817: aio-libs aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and PythonN/A8.7 HighN/ANov 9, 2026
CVE-2026-123816: pyload: pyLoad is a free and open-source download manager written in Python8.1 HighN/AN/ANov 9, 2026
CVE-2026-123815: pyload: pyLoad is a free and open-source download manager written in PythonN/A9.4 CriticalN/ANov 9, 2026
CVE-2026-123814: pyload: pyLoad is a free and open-source download manager written in Python6.4 MediumN/AN/ANov 9, 2026
CVE-2026-123813: pyload: pyLoad is a free and open-source download manager written in Python7.5 HighN/AN/ANov 9, 2026
CVE-2026-124033: AWS aws-parallelcluster: The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a…6.4 Medium5.9 MediumN/ANov 9, 2026
CVE-2026-123812: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability3.7 LowN/AN/ANov 9, 2026
CVE-2026-123811: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability7.5 HighN/AN/ANov 9, 2026
CVE-2026-63634: tempoxyz pympp: pympp is a Python SDK for the Machine Payments ProtocolN/A6.9 MediumN/ANov 9, 2026
CVE-2026-123810: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.3 MediumN/AN/ANov 9, 2026
CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions7.8 HighN/AN/ANov 9, 2026
CVE-2026-123809: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.2 MediumN/AN/ANov 9, 2026
CVE-2026-63497: titraio titra: titra is an open source time tracking projectN/A5.3 MediumN/ANov 9, 2026
CVE-2026-124994: Turboderp-org ExLlamaV3: A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.36.3 Medium5.3 MediumN/ANov 9, 2026
CVE-2026-123808: nuxt ui: Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS5.3 MediumN/AN/ANov 9, 2026
CVE-2026-123807: SignalK, @signalk: Signal K Server is a server application that runs on a central hub in a boat9.8 CriticalN/AN/ANov 9, 2026
CVE-2026-122056: Red Hat: A flaw was found in OpenSCAP5.9 MediumN/AN/ANov 9, 2026
CVE-2026-124992: n/a nushell: A vulnerability was identified in nushell up to 0.116.13.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…8.1 High8.6 HighN/ANov 9, 2026
CVE-2026-113971: Apple iOS and iPadOS: This issue was addressed by restricting options offered on a locked deviceN/AN/AN/ANov 9, 2026
CVE-2026-113969: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113968: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113965: Apple: This issue was addressed with improved checksN/AN/AN/ANov 9, 2026
CVE-2026-113964: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113963: Apple: An authorization issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
376-400 of 427771
‹›