The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-99217: In the Linux kernel, the following vulnerability has been resolved: fork: release the files of a failed fork after…N/AN/AN/ANov 2, 2026
CVE-2026-94290: SUSE Rancher: SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…9.1 CriticalN/AN/ANov 2, 2026
CVE-2026-88809: Server-Side Request Forgery (SSRF)7.6 HighN/AN/ANov 2, 2026
CVE-2026-77881: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated…6.2 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-77880: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77879: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API…7.7 High8.5 HighN/ANov 2, 2026
CVE-2026-77878: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77877: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77876: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the…9.8 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-2102: Wren Security wrensec-commons: wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding6.1 MediumN/AN/ANov 2, 2026
CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., LtdN/AN/AN/ANov 2, 2026
CVE-2026-120501: redimp otterwiki: An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows…5.3 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-120500: redimp otterwiki: An Otter Wiki before 2.26.2 contains a stored cross-site scripting vulnerability in OtterwikiMdRenderer.block_code that…6.1 Medium5.3 MediumN/ANov 2, 2026
CVE-2026-115654: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that…N/A6.9 MediumN/ANov 2, 2026
CVE-2026-115653: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a…N/A7.0 HighN/ANov 2, 2026
CVE-2026-114408: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6…N/A8.7 HighN/ANov 2, 2026
CVE-2026-109142: Authorization Bypass Through User-Controlled Key8.4 HighN/AN/ANov 2, 2026
CVE-2026-109141: Authorization Bypass Through User-Controlled Key8.4 HighN/AN/ANov 2, 2026
CVE-2026-109140: Reusing a Nonce, Key Pair in Encryption8.4 HighN/AN/ANov 2, 2026
CVE-2026-104080: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-73697: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-73696: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user…9.1 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-73695: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120492: Chainlit: Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass…5.4 Medium6.3 MediumN/ANov 2, 2026
CVE-2026-120491: Wing FTP Software Wing FTP Server: Wing FTP Server before 8.2.6 contains a stored cross-site scripting vulnerability that allows authenticated web-client…5.4 Medium5.1 MediumN/ANov 2, 2026
26-50 of 574114
‹›