The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120953: MongoDB Atlas SQL JDBC Driver: A URI redirection weakness exists in the authentication component of the Atlas SQL JDBC Driver4.3 Medium5.1 MediumN/ANov 3, 2026
CVE-2026-120684: MongoDB C Driver: A memory-initialization flaw in the legacy GridFS file handling of the MongoDB C Driver can cause uninitialized process…6.5 Medium6.0 MediumN/ANov 3, 2026
CVE-2026-120678: MongoDB C Driver: A memory management flaw in the MongoDB C Driver's handling of compressed responses may cause the client library to…7.5 High8.7 HighN/ANov 3, 2026
CVE-2026-120673: MongoDB Rust Driver: A component of the MongoDB Rust Driver that records diagnostic tracing data can capture command content before…5.5 Medium6.8 MediumN/ANov 3, 2026
CVE-2026-119922: AWS babelfish-for-postgresql: Improper access control in the Babelfish for PostgreSQL extension versions 1.2-1.5, 2.1-2.15, 3.1-3.12, 4.0-4.8,…8.8 High8.7 HighN/ANov 3, 2026
CVE-2026-112917: Docker Docker Desktop: In Docker Desktop for Windows with the WSL2 backend, an unprivileged Linux container can use 32-bit socketcall to…N/A9.2 CriticalN/ANov 3, 2026
CVE-2026-63499: zeroturnaround zt-zip: zt-zip is a Java library that provides convenience methods for ZIP archive manipulationN/A6.9 MediumN/ANov 3, 2026
CVE-2026-63418: monitoring-plugins: Monitoring Plugins is a suite of plugins for monitoring applications7.0 HighN/AN/ANov 3, 2026
CVE-2026-44266: enspirit elo: Elo is a purely functional expression language for no-code tools9.8 CriticalN/AN/ANov 3, 2026
CVE-2026-121628: bagisto: Bagisto before 2.3.16 and 2.4.x before 2.4.1 contains a race condition vulnerability in manageCartRule() that allows…3.7 Low6.3 MediumN/ANov 3, 2026
CVE-2026-121624: Nanosystems Supremo: Nanosystems Supremo for Windows and macOS before 5.0.2.3874 contains an improper certificate validation vulnerability…6.8 Medium7.6 HighN/ANov 3, 2026
CVE-2026-121263: phpMyAdmin MoTranslator: A vulnerability was determined in phpMyAdmin MoTranslator up to 6.0.16.3 Medium2.1 LowN/ANov 3, 2026
CVE-2026-116845: netbox-community netbox: NetBox from 2.9.0 before 4.7.4 contains a broken access control vulnerability in BulkComponentCreateView that allows…5.4 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-63436: zeroturnaround zt-zip: zt-zip is a Java library that provides convenience methods for ZIP archive manipulation6.1 MediumN/AN/ANov 3, 2026
CVE-2026-44267: enspirit elo: Elo is a purely functional expression language for no-code tools9.8 CriticalN/AN/ANov 3, 2026
CVE-2026-44265: enspirit elo: Elo is a purely functional expression language for no-code tools7.4 HighN/AN/ANov 3, 2026
CVE-2026-39777: WC Lovers WCFM Membership: Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-39743: WC Lovers WCFM Membership: Missing Authorization vulnerability in WC Lovers WCFM Membership wc-multivendor-membership allows Exploiting…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-38601: n/a: A hardcoded session secret key in codeskyblue gohttpserver through v1.3.0 allows attackers to impersonate any user,…N/AN/AN/ANov 3, 2026
CVE-2026-38595: n/a: An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a…N/AN/AN/ANov 3, 2026
CVE-2026-28336: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of…9.9 CriticalN/AN/ANov 3, 2026
CVE-2026-28335: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution8.4 HighN/AN/ANov 3, 2026
CVE-2026-28327: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability8.2 HighN/AN/ANov 3, 2026
CVE-2026-121604: wlroots: wlroots before 0.20.2 contains an out-of-bounds read vulnerability in read_surface_class() in xwayland/xwm.c that…3.3 Low4.8 MediumN/ANov 3, 2026
CVE-2026-121602: solanum-ircd solanum: Solanum before commit 2ce64de contains a heap-based buffer overflow vulnerability that allows a malicious linked server…6.5 Medium8.5 HighN/ANov 3, 2026
401-425 of 528356
‹›