The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-101174: Huawei HarmonyOS: DoS vulnerability in the DSoftBus module5.7 MediumN/AN/ANov 2, 2026
CVE-2026-101173: Huawei HarmonyOS: DoS vulnerability in the DSoftBus module6.5 MediumN/AN/ANov 2, 2026
CVE-2026-101172: Huawei HarmonyOS: Permission control vulnerability in the graphics module6.2 MediumN/AN/ANov 2, 2026
CVE-2026-101171: Huawei HarmonyOS: Permission control vulnerability in the background task management module3.6 LowN/AN/ANov 2, 2026
CVE-2026-101170: Huawei HarmonyOS: DoS vulnerability in the file parsing module4.0 MediumN/AN/ANov 2, 2026
CVE-2026-103310: Unknown PayHere Payment Gateway: The PayHere Payment Gateway WordPress plugin from 2.4.0 through 2.4.5 does not verify the authenticity of payment…5.3 MediumN/AN/ANov 2, 2026
CVE-2026-120348: dayrui XunRuiCMS: A vulnerability was identified in dayrui XunRuiCMS up to 4.7.47.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120347: dayrui XunRuiCMS: A vulnerability was determined in dayrui XunRuiCMS up to 4.7.47.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120345: WAVLINK WN551X3-A: A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e96510.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2025-11969: WSO2: The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to…9.4 CriticalN/AN/ANov 2, 2026
CVE-2024-5617: WSO2: The account lock feature fails to correctly enforce account lockouts on the primary user store when users with…4.8 MediumN/AN/ANov 2, 2026
CVE-2026-120344: WAVLINK WN551X3-A: A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e96510.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120343: mathurvishal CloudClassroom-PHP-Project: A flaw has been found in mathurvishal CloudClassroom-PHP-Project4.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120342: mathurvishal CloudClassroom-PHP-Project: A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project7.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120341: mathurvishal CloudClassroom-PHP-Project: A security vulnerability has been detected in mathurvishal CloudClassroom-PHP-Project7.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120340: mathurvishal CloudClassroom-PHP-Project: A weakness has been identified in mathurvishal CloudClassroom-PHP-Project3.7 Low2.9 LowN/ANov 2, 2026
CVE-2026-120339: mathurvishal CloudClassroom-PHP-Project: A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project4.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120337: VStarcam O-KAM SuperIPCam: A vulnerability was determined in VStarcam O-KAM SuperIPCam 1.3.3.327.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-120336: VStarcam O-KAM Client: A vulnerability was found in VStarcam O-KAM Client 1.3.3.327.3 High5.5 MediumN/ANov 2, 2026
CVE-2026-68591: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a permissions bypass6.7 MediumN/AN/ANov 2, 2026
CVE-2026-68590: MediaTek, Inc. MediaTek chipset: In ip_stack, there is a possible out of bounds read due to improper input validation5.3 MediumN/AN/ANov 2, 2026
CVE-2026-68589: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds check6.7 MediumN/AN/ANov 2, 2026
CVE-2026-68588: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflow5.3 MediumN/AN/ANov 2, 2026
CVE-2026-20600: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to a logic error5.3 MediumN/AN/ANov 2, 2026
CVE-2026-20599: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a missing permission check6.7 MediumN/AN/ANov 2, 2026
376-400 of 574114
‹›