The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-47738: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/AN/ANov 6, 2026
CVE-2026-44519: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.1 MediumN/AN/ANov 6, 2026
CVE-2026-123791: OpenBMB Internet of Agents: A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a7.3 High5.5 MediumN/ANov 6, 2026
CVE-2026-123788: chenyme grok2api: A security vulnerability has been detected in chenyme grok2api up to 3.1.64.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-119800: IgnisDa ryot: Ryot is a self-hosted personal tracking application4.3 MediumN/AN/ANov 6, 2026
CVE-2026-104267: randombit botan: Botan is a C++ cryptography libraryN/A4.1 MediumN/ANov 6, 2026
CVE-2026-104254: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/AN/ANov 6, 2026
CVE-2026-103022: urwid: Urwid is a console user interface library for Python5.3 MediumN/AN/ANov 6, 2026
CVE-2026-86044: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLab9.6 CriticalN/AN/ANov 6, 2026
CVE-2026-86005: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…N/A9.3 CriticalN/ANov 6, 2026
CVE-2026-85737: Velocidex velociraptor: Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries6.5 MediumN/AN/ANov 6, 2026
CVE-2026-85736: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…8.1 HighN/AN/ANov 6, 2026
CVE-2026-85726: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…7.5 HighN/AN/ANov 6, 2026
CVE-2026-85712: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…8.8 HighN/AN/ANov 6, 2026
CVE-2026-85708: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…7.5 HighN/AN/ANov 6, 2026
CVE-2026-85295: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-71863: freedomofpress securedrop: SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept…2.6 LowN/AN/ANov 6, 2026
CVE-2026-71397: elixir-grpc grpc_server: Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc_server allows unauthenticated…N/A8.2 HighN/ANov 6, 2026
CVE-2026-63441: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codesN/A4.9 MediumN/ANov 6, 2026
CVE-2026-63440: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes5.9 MediumN/AN/ANov 6, 2026
CVE-2026-63439: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-63438: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-63437: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes6.5 MediumN/AN/ANov 6, 2026
CVE-2026-59171: stleary JSON-java: JSON-java is a reference implementation of a JSON package in Java5.9 MediumN/AN/ANov 6, 2026
CVE-2026-54589: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…N/A7.0 HighN/ANov 6, 2026
451-475 of 425038
‹›