The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-69145: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-69144: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-69142: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-69141: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-69140: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-69137: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.7 HighN/AN/ANov 5, 2026
CVE-2026-69136: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-69135: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-69134: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-63218: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-63217: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-63215: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-63214: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-63213: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.2 HighN/AN/ANov 5, 2026
CVE-2026-63111: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 HighN/ANov 5, 2026
CVE-2026-61653: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-61651: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-61650: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.1 HighN/AN/ANov 5, 2026
CVE-2026-61649: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.7 HighN/AN/ANov 5, 2026
CVE-2026-61648: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.3 HighN/AN/ANov 5, 2026
CVE-2026-123273: ImageMagick: ImageMagick before 7.1.2-35 and 6.9.13-60 contains an infinite loop vulnerability in the SVG decoder because…6.5 Medium7.1 HighN/ANov 5, 2026
CVE-2026-123272: mark3labs mcp-go: Mark3labs mcp-go before v1.2.1 contains an improper validation vulnerability in OAuthHandler.fetchServerMetadata that…8.0 High5.1 MediumN/ANov 5, 2026
CVE-2026-123271: diillson ChatCLI: ChatCLI before v1.215.2 contains an improper validation vulnerability in the MCP OAuth login flow that uses…8.0 High5.1 MediumN/ANov 5, 2026
CVE-2026-123208: libnoname noname: noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard…8.8 High7.7 HighN/ANov 5, 2026
CVE-2026-123207: LibreSpark LibreTV: LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass…3.1 Low2.3 LowN/ANov 5, 2026
26-50 of 423114
‹›