The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-54374: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-54373: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows…3.5 Low5.1 MediumN/ANov 4, 2026
CVE-2026-54372: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation…8.8 High8.7 HighN/ANov 4, 2026
CVE-2026-122266: AWS: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC…8.7 High6.3 MediumN/ANov 4, 2026
CVE-2026-122020: NST Labs Tech Nstbrowser: A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.14.3 Medium2.1 LowN/ANov 4, 2026
CVE-2026-122019: 6amTech 6valley: A vulnerability was identified in 6amTech 6valley 16.07.3 High5.5 MediumN/ANov 4, 2026
CVE-2026-122016: yangzongzhuan RuoYi-Vue: A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.26.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-122015: NPC-Worldwide npcpy: A vulnerability was found in NPC-Worldwide npcpy up to 2.1.276.3 Medium2.1 LowN/ANov 4, 2026
CVE-2026-121751: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121750: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121749: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.3 Low4.6 MediumN/ANov 4, 2026
CVE-2026-121748: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.6 Low1.8 LowN/ANov 4, 2026
CVE-2026-121747: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121746: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121745: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions2.5 Low2.0 LowN/ANov 4, 2026
CVE-2026-115473: cesanta mongoose: Mongoose is an embedded web server and network library6.5 MediumN/AN/ANov 4, 2026
CVE-2026-103002: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning8.8 HighN/AN/ANov 4, 2026
CVE-2026-102895: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-102894: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.1 CriticalN/AN/ANov 4, 2026
CVE-2026-102280: sandboxie-plus Sandboxie: Sandboxie-Plus is an open source sandbox-based isolation software for WindowsN/A6.9 MediumN/ANov 4, 2026
CVE-2026-86041: mayswind ezbookkeeping: ezBookkeeping is an open source, self-hosted personal finance applicationN/A5.3 MediumN/ANov 4, 2026
CVE-2026-122028: NST Labs Tech Nstbrowser: A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.04.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-54381: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-76892: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A8.7 HighN/ANov 4, 2026
CVE-2026-76826: tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A7.5 HighN/ANov 4, 2026
26-50 of 418286
‹›