The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2025-71454: vtenext: vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in…6.5 Medium6.9 MediumN/ANov 4, 2026
CVE-2025-71453: vtenext: vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php…6.1 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-102339: telepresenceio telepresence: Telepresence enables local development against a remote Kubernetes or OpenShift cluster8.2 HighN/AN/ANov 4, 2026
CVE-2026-122009: DataLinkDC Dinky: A flaw has been found in DataLinkDC Dinky up to 1.2.57.3 High6.9 MediumN/ANov 4, 2026
CVE-2026-10859: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-11376: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.8 HighN/AN/ANov 4, 2026
CVE-2026-11724: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.5 HighN/AN/ANov 4, 2026
CVE-2026-12356: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-12538: IBM MQ Appliance: IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-12550: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-13271: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.1 HighN/AN/ANov 4, 2026
CVE-2026-13284: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13289: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13292: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.8 HighN/AN/ANov 4, 2026
CVE-2026-14252: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…6.2 MediumN/AN/ANov 4, 2026
CVE-2026-18142: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-97705: moleculerjs moleculer: Moleculer is a progressive microservices framework for Node.js7.5 HighN/AN/ANov 4, 2026
CVE-2026-76806: solidtime-io solidtime: Solidtime is an open-source time-tracking app6.3 MediumN/AN/ANov 4, 2026
CVE-2026-122220: wpo365 WPO365 | SEAMLESS WORDPRESS + MICROSOFT INTEGRATION (WPO365 | LOGIN): WPO365 | LOGIN (wpo365-login) plugin before version 45.2 contains an authentication bypass by capture-replay…7.4 High9.1 CriticalN/ANov 4, 2026
CVE-2026-122192: AWS firecracker: Improper handling of a failed memory remap in Firecracker versions 0.23.0 through 1.16.1 might allow a guest user with…7.5 High7.1 HighN/ANov 4, 2026
CVE-2026-121933: Linksys E5350: A flaw has been found in Linksys E5350 1.0.00.03710.0 Critical9.3 CriticalN/ANov 4, 2026
CVE-2026-115574: zulip: Zulip is an open-source team collaboration tool5.3 MediumN/AN/ANov 4, 2026
CVE-2026-115474: zulip: Zulip is an open-source team collaboration tool6.5 MediumN/AN/ANov 4, 2026
CVE-2026-113374: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capabilityN/A8.6 HighN/ANov 4, 2026
CVE-2026-113373: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML…N/A9.1 CriticalN/ANov 4, 2026
26-50 of 418286
‹›