The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-55368: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/38.1 HighN/AN/ANov 4, 2026
CVE-2026-55367: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/37.5 HighN/AN/ANov 4, 2026
CVE-2026-54380: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-54379: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-54378: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user…9.6 Critical9.3 CriticalN/ANov 4, 2026
CVE-2026-54377: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows…6.5 Medium6.9 MediumN/ANov 4, 2026
CVE-2026-54376: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that…8.2 High8.2 HighN/ANov 4, 2026
CVE-2026-54375: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that…8.4 High8.6 HighN/ANov 4, 2026
CVE-2026-54374: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-54373: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows…3.5 Low5.1 MediumN/ANov 4, 2026
CVE-2026-54372: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation…8.8 High8.7 HighN/ANov 4, 2026
CVE-2026-122266: AWS: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC…8.7 High6.3 MediumN/ANov 4, 2026
CVE-2026-122020: NST Labs Tech Nstbrowser: A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.14.3 Medium2.1 LowN/ANov 4, 2026
CVE-2026-122019: 6amTech 6valley: A vulnerability was identified in 6amTech 6valley 16.07.3 High5.5 MediumN/ANov 4, 2026
CVE-2026-122016: yangzongzhuan RuoYi-Vue: A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.26.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-122015: NPC-Worldwide npcpy: A vulnerability was found in NPC-Worldwide npcpy up to 2.1.276.3 Medium2.1 LowN/ANov 4, 2026
CVE-2026-121751: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121750: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121749: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.3 Low4.6 MediumN/ANov 4, 2026
CVE-2026-121748: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.6 Low1.8 LowN/ANov 4, 2026
CVE-2026-121747: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121746: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121745: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions2.5 Low2.0 LowN/ANov 4, 2026
CVE-2026-115473: cesanta mongoose: Mongoose is an embedded web server and network library6.5 MediumN/AN/ANov 4, 2026
CVE-2026-103002: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning8.8 HighN/AN/ANov 4, 2026
26-50 of 418286
‹›