The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121543: a466350665 smart-sso: smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any…8.8 High8.7 HighN/ANov 3, 2026
CVE-2026-121455: dbgate: DbGate before 7.3.3 contains a missing authorization vulnerability that allows connection-restricted authenticated…5.4 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121454: padloc: Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows…3.7 Low6.3 MediumN/ANov 3, 2026
CVE-2026-121453: dataease SQLBot: SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated…2.7 Low5.1 MediumN/ANov 3, 2026
CVE-2026-121452: mlogclub bbs-go: bbs-go through 4.4.6 contains an improper certificate validation vulnerability that allows network-positioned attackers…6.5 Medium8.3 HighN/ANov 3, 2026
CVE-2026-121451: amir1376 ab-download-manager: AB Download Manager before 1.11.2 contains a cross-site request forgery vulnerability in its unauthenticated…8.8 High8.7 HighN/ANov 3, 2026
CVE-2026-121450: PAICNI CFNext: CFNext before 3.1.0 contains a weak cryptographic derivation vulnerability that allows subscription link holders to…7.5 High7.7 HighN/ANov 3, 2026
CVE-2026-121260: Ziroom ZHOME A0101: A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 2020041514059.1 Critical8.5 HighN/ANov 3, 2026
CVE-2026-120755: The HDF Group Szip Filter: HDF5 through 2.2.0 contains an out-of-bounds read vulnerability in H5Z__filter_szip() in src/H5Zszip.cN/A4.7 MediumN/ANov 3, 2026
CVE-2026-119741: RsyncProject rsync: rsync through 3.5.1 contains a denial of service vulnerability in the delta-transfer sender's hash_search() in match.c…7.5 High8.7 HighN/ANov 3, 2026
CVE-2026-118487: Eclipse Foundation Eclipse Vert.x: In Eclipse Vert.x versions [4.0.0, 4.5.35] or [5.0.0, 5.2.2], the `FrameParser` in vertx-stomp creates a `RecordParser`…7.5 HighN/AN/ANov 3, 2026
CVE-2026-114582: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-113733: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3 and 6.0 before 6.0.102.2 Low2.1 LowN/ANov 3, 2026
CVE-2026-113593: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.193.1 Low2.3 LowN/ANov 3, 2026
CVE-2026-111362: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-108147: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-118505: team-alembic ash_authentication: Improper Restriction of Excessive Authentication Attempts vulnerability in team-alembic ash_authentication allows an…N/A6.3 MediumN/ANov 3, 2026
CVE-2026-119215: team-alembic ash_authentication: Authorization Bypass Through User-Controlled Key vulnerability in team-alembic ash_authentication allows a user with an…N/A7.6 HighN/ANov 3, 2026
CVE-2026-111211: djangoproject Django: An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.195.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-120758: The HDF Group HDF5: HDF5 through 2.2.0 contains a NULL pointer dereference vulnerability in H5HL_unprotect() in src/H5HL.cN/A5.4 MediumN/ANov 3, 2026
CVE-2026-120757: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5L__extern_traverse() in src/H5Lexternal.c, the…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-121578: Amidaware Tactical RMM: Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various…N/AN/AN/ANov 3, 2026
CVE-2026-120756: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.cN/A1.9 LowN/ANov 3, 2026
CVE-2026-121564: lucasrodes whatstk: Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from…N/A1.8 LowN/ANov 3, 2026
CVE-2026-120754: The HDF Group Scale-Offset Filter: HDF5 through 2.2.0 contains an uninitialized memory read vulnerability in H5Z__filter_scaleoffset() in…N/A1.9 LowN/ANov 3, 2026
426-450 of 528356
‹›