The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-88982: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows5.4 MediumN/A0%Nov 5, 2026
CVE-2026-88980: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows8.6 HighN/A1%Nov 5, 2026
CVE-2026-85068: networkupstools nut: Network UPS Tools is a collection of programs which provide a common interface for monitoring and administering UPS,…2.4 LowN/A0%Nov 5, 2026
CVE-2026-77596: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows9.6 CriticalN/A0%Nov 5, 2026
CVE-2026-68509: M66B FairEmail: FairEmail is a fully featured, open source, privacy-friendly email app for Android6.3 MediumN/A0%Nov 5, 2026
CVE-2026-16579: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 5, 2026
CVE-2026-113663: ag2ai: AG2 is an open-source AgentOS8.8 HighN/A0%Nov 5, 2026
CVE-2026-110390: Flexera: Missing authentication in the FlexNet Beacon component of Flexera One and FlexNet Manager Suite allows unauthenticated…N/A6.9 Medium0%Nov 5, 2026
CVE-2026-102943: dagucloud dagu: Dagu is a workflow engine with a built-in Web user interface6.5 MediumN/A0%Nov 5, 2026
CVE-2026-92693: pavel-odintsov fastnetmon: FastNetMon is a high-performance DDoS detector and sensor8.2 HighN/A0%Nov 5, 2026
CVE-2026-88981: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows8.6 HighN/A0%Nov 5, 2026
CVE-2026-111495: TPC Software Matchpoint: API keys, credentials, and configuration parameters embedded in the MatchPoint APK, which can be extracted through…N/A5.1 Medium0%Nov 5, 2026
CVE-2026-111494: TPC Software Matchpoint: Incorrect validation of TLS certificates in the MatchPoint Android app due to a TrustManager that accepts any…N/A9.1 Critical0%Nov 5, 2026
CVE-2026-111493: TPC Software Matchpoint: Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be…N/A8.7 High0%Nov 5, 2026
CVE-2026-111492: TPC Software Matchpoint: SQL injection in the push notification handler of the MatchPoint Android app, which processes messages from Firebase…N/A8.6 High0%Nov 5, 2026
CVE-2026-111491: TPC Software Matchpoint: Credentials are stored in plain text in an SQLite database and in the MatchPoint Android app's SharedPreferencesN/A6.9 Medium0%Nov 5, 2026
CVE-2026-111490: TPC Software Matchpoint: Insecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the `actingasuser` HTTP…N/A9.9 Critical0%Nov 5, 2026
CVE-2026-111489: TPC Software Matchpoint: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint…N/A9.9 Critical0%Nov 5, 2026
CVE-2026-88979: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows5.8 MediumN/A0%Nov 5, 2026
CVE-2026-88986: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows6.1 MediumN/A0%Nov 5, 2026
CVE-2026-88985: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows6.5 MediumN/A0%Nov 5, 2026
CVE-2026-122267: Chainguard MinIO: MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a…N/A8.8 High0%Nov 5, 2026
CVE-2026-88983: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows5.0 MediumN/A0%Nov 5, 2026
CVE-2026-58273: rucio: Rucio is a scientific data management framework8.1 HighN/A1%Nov 5, 2026
CVE-2026-112908: tox-dev filelock: filelock is a platform-independent file lock for Python5.3 MediumN/A0%Nov 5, 2026
426-450 of 425038
‹›