The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122047: Campcodes Complete Advance Loan Management System: A security vulnerability has been detected in Campcodes Complete Advance Loan Management System 1.07.3 High5.5 Medium0%Nov 4, 2026
CVE-2026-122038: krupalshah EmployeeRecruitmentSystem: A vulnerability was identified in krupalshah EmployeeRecruitmentSystem up to 922ff6d208278282e7c8e36d70d9ae356adec9fe7.3 High5.5 Medium0%Nov 4, 2026
CVE-2026-122028: NST Labs Tech Nstbrowser: A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.04.3 Medium2.1 Low0%Nov 4, 2026
CVE-2026-115770: pocket-id: Pocket ID is an OIDC provider that allows users to authenticate with their passkeys to services9.6 CriticalN/A0%Nov 4, 2026
CVE-2026-108387: radareorg radare2: radare2 is a UNIX-like reverse engineering framework and command-line toolsetN/A8.5 High0%Nov 4, 2026
CVE-2026-102337: webmin: Webmin is a web-based system administration tool for Unix-like serversN/A4.9 Medium1%Nov 4, 2026
CVE-2026-122049: Campcodes Bitcoin Wallet System: A flaw has been found in Campcodes Bitcoin Wallet System 1.03.7 Low2.9 Low0%Nov 4, 2026
CVE-2026-122048: Campcodes Division Regional Athletic Meet Game Result Matrix System: A vulnerability was identified in Campcodes Division Regional Athletic Meet Game Result Matrix System up to 2.17.3 High5.5 Medium0%Nov 4, 2026
CVE-2026-97693: xerrors Yuxi: Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform9.9 CriticalN/A1%Nov 4, 2026
CVE-2026-58128: Alan Health Alan: Health Insurance: Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a…6.2 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-57567: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…8.6 HighN/A1%Nov 4, 2026
CVE-2026-57566: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…9.3 CriticalN/A1%Nov 4, 2026
CVE-2026-57565: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…6.5 MediumN/A1%Nov 4, 2026
CVE-2026-55368: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/38.1 HighN/A0%Nov 4, 2026
CVE-2026-55367: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/37.5 HighN/A0%Nov 4, 2026
CVE-2026-54380: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 Medium0%Nov 4, 2026
CVE-2026-54379: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-54378: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user…9.6 Critical9.3 Critical0%Nov 4, 2026
CVE-2026-54377: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows…6.5 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-54376: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that…8.2 High8.2 High0%Nov 4, 2026
CVE-2026-54375: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that…8.4 High8.6 High0%Nov 4, 2026
CVE-2026-54374: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows…7.5 High8.7 High0%Nov 4, 2026
CVE-2026-54373: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows…3.5 Low5.1 Medium0%Nov 4, 2026
CVE-2026-54372: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation…8.8 High8.7 High0%Nov 4, 2026
CVE-2026-122266: AWS: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC…8.7 High6.3 Medium0%Nov 4, 2026
426-450 of 423114
‹›