The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-19319: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information…5.3 MediumN/AN/ANov 4, 2026
CVE-2026-18142: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-17493: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due…7.5 HighN/AN/ANov 4, 2026
CVE-2026-16725: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-14252: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…6.2 MediumN/AN/ANov 4, 2026
CVE-2026-13292: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.8 HighN/AN/ANov 4, 2026
CVE-2026-13289: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13284: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13271: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.1 HighN/AN/ANov 4, 2026
CVE-2026-12550: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-12538: IBM MQ Appliance: IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-12356: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-122235: janhq jan: Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows…4.7 Medium5.7 MediumN/ANov 4, 2026
CVE-2026-122234: benjamine jsondiffpatch: jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by…4.7 Medium2.3 LowN/ANov 4, 2026
CVE-2026-122233: php frankenphp: FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP…3.7 Low6.3 MediumN/ANov 4, 2026
CVE-2026-122224: retspen webvirtcloud: WebVirtCloud through commit bb920b0 contains a missing authorization vulnerability that allows low-privileged…8.1 High7.2 HighN/ANov 4, 2026
CVE-2026-122140: germondai trawl: Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to…5.8 Medium6.3 MediumN/ANov 4, 2026
CVE-2026-122139: blueprintue blueprintue-self-hosted-edition: blueprintUE Self-Hosted Edition before 4.3.3 contains an account enumeration vulnerability in…5.3 Medium6.9 MediumN/ANov 4, 2026
CVE-2026-122138: blueprintue blueprintue-self-hosted-edition: BlueprintUE Self-Hosted Edition 4.2.0 before 4.3.4 contains a login rate limit bypass vulnerability in…5.3 Medium6.3 MediumN/ANov 4, 2026
CVE-2026-122137: romkatv: Powerlevel10k before 1.20.19 contains an insecure temporary directory vulnerability in the bundled gitstatus/install…6.7 Medium5.4 MediumN/ANov 4, 2026
CVE-2026-122136: romkatv powerlevel10k: Powerlevel10k before 1.20.19 contains a symlink following vulnerability in _p9k_dump_instant_prompt that allows local…4.4 Medium4.1 MediumN/ANov 4, 2026
CVE-2026-122135: mistralai mistral-vibe: Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122134: mistralai mistral-vibe: Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122133: mistralai mistral-vibe: Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122132: go-chi chi: go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows…6.1 Medium5.1 MediumN/ANov 4, 2026
26-50 of 418286
‹›