The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-114032: Illumio Core Ven: The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability7.8 HighN/A0%Nov 9, 2026
CVE-2026-114031: Illumio Core Ven: Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for…7.8 HighN/A0%Nov 9, 2026
CVE-2026-125107: julianhille MuhammaraJS: Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron7.5 HighN/A0%Nov 9, 2026
CVE-2026-125106: wagtail: Wagtail is an open source content management system built on Django6.5 MediumN/A0%Nov 9, 2026
CVE-2026-125105: wagtail: Wagtail is an open source content management system built on Django3.7 LowN/A0%Nov 9, 2026
CVE-2026-123820: wagtail: Wagtail is an open source content management system built on Django5.3 MediumN/A0%Nov 9, 2026
CVE-2026-63644: xddxdd bird-lg-go: bird-lg-go is a BIRD looking glass in Go7.5 HighN/A0%Nov 9, 2026
CVE-2026-123819: wagtail: Wagtail is an open source content management system built on Django6.5 MediumN/A0%Nov 9, 2026
CVE-2026-123818: InternLM lmdeploy: LMDeploy is a toolkit for compressing, deploying, and serving large language models7.5 HighN/A0%Nov 9, 2026
CVE-2026-123817: aio-libs aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and PythonN/A8.7 High0%Nov 9, 2026
CVE-2026-123816: pyload: pyLoad is a free and open-source download manager written in Python8.1 HighN/A0%Nov 9, 2026
CVE-2026-123815: pyload: pyLoad is a free and open-source download manager written in PythonN/A9.4 Critical0%Nov 9, 2026
CVE-2026-123814: pyload: pyLoad is a free and open-source download manager written in Python6.4 MediumN/A0%Nov 9, 2026
CVE-2026-123813: pyload: pyLoad is a free and open-source download manager written in Python7.5 HighN/A0%Nov 9, 2026
CVE-2026-124033: AWS aws-parallelcluster: The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a…6.4 Medium5.9 Medium0%Nov 9, 2026
CVE-2026-123812: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability3.7 LowN/A0%Nov 9, 2026
CVE-2026-123811: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability7.5 HighN/A0%Nov 9, 2026
CVE-2026-63634: tempoxyz pympp: pympp is a Python SDK for the Machine Payments ProtocolN/A6.9 Medium0%Nov 9, 2026
CVE-2026-123810: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.3 MediumN/A0%Nov 9, 2026
CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions7.8 HighN/A0%Nov 9, 2026
CVE-2026-123809: Improper Neutralization of Special Elements Used in a Template Engine4.2 MediumN/A0%Nov 9, 2026
CVE-2026-63497: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A5.3 Medium0%Nov 9, 2026
CVE-2026-124994: Out-of-bounds Read6.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-123808: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Nov 9, 2026
CVE-2026-123807: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Nov 9, 2026
376-400 of 540521