The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123876: Red Hat: A flaw was found in the default seccomp profile used by Podman via containers-common4.4 MediumN/AN/ANov 6, 2026
CVE-2026-102359: yuzutech kroki: Kroki creates diagrams from textual descriptions7.5 HighN/AN/ANov 6, 2026
CVE-2026-118670: OHIF Viewers: OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages8.8 HighN/AN/ANov 6, 2026
CVE-2026-123824: sensiolabs symfony: The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype,…N/A2.3 LowN/ANov 6, 2026
CVE-2026-49951: infiniflow ragflow: RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force…6.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-123851: JetBrains Junie GitHub Action: In JetBrains Junie GitHub Action before 1.6.4 prompt injection protection could be bypassed via HTML-encoded characters5.4 MediumN/AN/ANov 6, 2026
CVE-2026-123848: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates7.4 HighN/AN/ANov 6, 2026
CVE-2026-123846: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 blind SSRF was possible via remote references in JSON Schema validation4.3 MediumN/AN/ANov 6, 2026
CVE-2026-123840: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 hTML injection was possible in Remote Development editor tabs4.7 MediumN/AN/ANov 6, 2026
CVE-2026-123836: JetBrains Datalore: In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup8.8 HighN/AN/ANov 6, 2026
CVE-2026-123834: JetBrains Datalore: In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's…7.5 HighN/AN/ANov 6, 2026
CVE-2026-118515: sensiolabs symfony: The Symfony Serializer component DataUriNormalizer handles only the exact types SplFileInfo, SplFileObject, and File,…N/A8.4 HighN/ANov 6, 2026
CVE-2026-85742: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox7.5 HighN/AN/ANov 6, 2026
CVE-2026-123748: chenyme grok2api: A security flaw has been discovered in chenyme grok2api up to 3.1.64.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-103985: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox7.1 HighN/AN/ANov 6, 2026
CVE-2026-123962: Debian FreedomBox: In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting…8.4 HighN/AN/ANov 6, 2026
CVE-2026-122193: AWS trusted-remote-execution: OS command injection in the example SSM document provisioning script in Trusted Remote Execution (REX) before…9.9 Critical9.3 CriticalN/ANov 6, 2026
CVE-2026-103984: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox6.5 MediumN/AN/ANov 6, 2026
CVE-2026-85743: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox8.2 HighN/AN/ANov 6, 2026
CVE-2026-85744: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox5.4 MediumN/AN/ANov 6, 2026
CVE-2026-62850: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox5.3 MediumN/AN/ANov 6, 2026
CVE-2026-62852: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox6.5 MediumN/AN/ANov 6, 2026
CVE-2026-62855: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox4.4 MediumN/AN/ANov 6, 2026
CVE-2026-106128: Progress Software Kendo UI for Vue: Prototype Pollution in @progress/kendo-vue-common in Progress Software Kendo UI for Vue versions 0.4.0 through 9.2.0…4.1 MediumN/AN/ANov 6, 2026
CVE-2026-62851: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox4.3 MediumN/AN/ANov 6, 2026
26-50 of 539234
‹›