The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-109683: TP-Link Systems Inc. Archer BE805 v1: A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can…N/A5.3 MediumN/ANov 6, 2026
CVE-2026-63437: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes6.5 MediumN/AN/ANov 6, 2026
CVE-2026-59171: stleary JSON-java: JSON-java is a reference implementation of a JSON package in Java5.9 MediumN/AN/ANov 6, 2026
CVE-2026-123974: PyTorch TorchServe: In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model…7.8 HighN/AN/ANov 6, 2026
CVE-2026-90975: Realtek RtUsbA64.sys: A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O…N/AN/AN/ANov 6, 2026
CVE-2026-84473: Kiteworks ownCloud: Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows…N/AN/AN/ANov 6, 2026
CVE-2026-82308: SonicWall SonicOS: A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…7.5 HighN/AN/ANov 6, 2026
CVE-2026-77709: SonicWall SonicOS: A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…5.9 MediumN/AN/ANov 6, 2026
CVE-2026-77708: SonicWall SonicOS: A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…5.9 MediumN/AN/ANov 6, 2026
CVE-2026-71495: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures10.0 CriticalN/AN/ANov 6, 2026
CVE-2026-62346: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures7.6 HighN/AN/ANov 6, 2026
CVE-2026-62345: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures7.6 HighN/AN/ANov 6, 2026
CVE-2026-56717: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-49126: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-49125: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-49124: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-49123: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-49122: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-47404: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-47403: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-47402: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-47401: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-47400: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-19868: SonicWall SonicOS: An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an…N/AN/AN/ANov 6, 2026
CVE-2026-19703: SonicWall SonicOS: A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions…5.1 MediumN/AN/ANov 6, 2026
26-50 of 425038
‹›