The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122135: mistralai mistral-vibe: Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122134: mistralai mistral-vibe: Mistral Vibe before 2.25.7 contains a remote code execution vulnerability that allows attackers to run commands by…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122133: mistralai mistral-vibe: Mistral Vibe before 2.25.5 on Windows contains an untrusted search path vulnerability that allows attackers to execute…8.8 High8.6 HighN/ANov 4, 2026
CVE-2026-122132: go-chi chi: go-chi chi 5.2.2 through 5.5.0 contains an open redirect vulnerability in the RedirectSlashes middleware that allows…6.1 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-122131: hapijs joi: Joi 17.13.6 before 17.13.9 and 18.2.5 before 18.3.1 contains a prototype pollution vulnerability in lib/messages.js…3.7 Low6.3 MediumN/ANov 4, 2026
CVE-2026-122130: CESNET ipfixcol2: CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that…8.2 High8.3 HighN/ANov 4, 2026
CVE-2026-122129: CESNET ipfixcol2: CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that…5.3 Medium6.9 MediumN/ANov 4, 2026
CVE-2026-122127: CESNET ipfixcol2: CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-122126: resiprocate: reSIProcate reTurn client through 1.14.0 contains a heap buffer overflow in TurnTcpSocket::handleReadHeader() that…5.9 Medium8.2 HighN/ANov 4, 2026
CVE-2026-121969: quozl netrek-client-cow: netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage() in short.c…6.5 Medium7.1 HighN/ANov 4, 2026
CVE-2026-121968: quozl netrek-client-cow: Netrek-client-cow through 3.3.3 contains an out-of-bounds read vulnerability in short.c handleSMessage() that allows…6.5 Medium7.1 HighN/ANov 4, 2026
CVE-2025-71457: vtenext: vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 CriticalN/ANov 4, 2026
CVE-2025-71456: vtenext: vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject…8.1 High8.6 HighN/ANov 4, 2026
CVE-2025-71455: vtenext: vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the…5.3 Medium5.9 MediumN/ANov 4, 2026
CVE-2025-71454: vtenext: vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in…6.5 Medium6.9 MediumN/ANov 4, 2026
CVE-2025-71453: vtenext: vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php…6.1 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-102339: telepresenceio telepresence: Telepresence enables local development against a remote Kubernetes or OpenShift cluster8.2 HighN/AN/ANov 4, 2026
CVE-2026-122009: DataLinkDC Dinky: A flaw has been found in DataLinkDC Dinky up to 1.2.57.3 High6.9 MediumN/ANov 4, 2026
CVE-2026-10859: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-11376: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.8 HighN/AN/ANov 4, 2026
CVE-2026-11724: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.5 HighN/AN/ANov 4, 2026
CVE-2026-12356: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-12538: IBM MQ Appliance: IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-12550: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-13271: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.1 HighN/AN/ANov 4, 2026
26-50 of 418286
‹›