The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126346: patrickjuchli basic-ftp: basic-ftp is an FTP client for Node.js5.9 MediumN/AN/ANov 12, 2026
CVE-2026-126345: patrickjuchli basic-ftp: basic-ftp is an FTP client for Node.js5.3 MediumN/AN/ANov 12, 2026
CVE-2026-126344: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.4 MediumN/AN/ANov 12, 2026
CVE-2026-126343: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.3 MediumN/AN/ANov 12, 2026
CVE-2026-126210: honojs node-server: @hono/node-server allows running the Hono application on Node.js5.3 MediumN/AN/ANov 12, 2026
CVE-2026-126357: honojs hono: Hono is a Web application framework that provides support for any JavaScript runtime5.3 MediumN/AN/ANov 12, 2026
CVE-2026-126356: honojs hono: Hono is a Web application framework that provides support for any JavaScript runtime5.3 MediumN/AN/ANov 12, 2026
CVE-2026-126355: honojs hono: Hono is a Web application framework that provides support for any JavaScript runtime5.3 MediumN/AN/ANov 12, 2026
CVE-2026-86324: Red Hat Red Hat Satellite 6: A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-86323: Red Hat Red Hat Satellite 6: A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-86322: Red Hat Red Hat Satellite 6: A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user…8.8 HighN/AN/ANov 12, 2026
CVE-2026-126793: AWS aws-advanced-go-wrapper: An untrusted search path issue in Aurora PostgreSQL dialect detection in the AWS Advanced Go Wrapper from release…8.0 High8.6 HighN/ANov 12, 2026
CVE-2026-126209: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of NokogiriN/A5.3 MediumN/ANov 12, 2026
CVE-2026-126208: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri4.7 MediumN/AN/ANov 12, 2026
CVE-2026-126207: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri4.7 MediumN/AN/ANov 12, 2026
CVE-2026-126206: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of NokogiriN/A5.3 MediumN/ANov 12, 2026
CVE-2026-126205: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri5.3 MediumN/AN/ANov 12, 2026
CVE-2026-106018: Johnson Controls EasyIO FW: Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows…N/A8.7 HighN/ANov 12, 2026
CVE-2026-127208: datamodel-code-generator: datamodel-code-generator before 0.84.0 contains a code injection vulnerability that allows attackers to achieve…8.8 High8.6 HighN/ANov 12, 2026
CVE-2026-127207: Sendcloud: Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated…5.4 Medium5.3 MediumN/ANov 12, 2026
CVE-2026-127206: hookandhook Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR): Image CAPTCHA for Contact Form 7 and WPForms through 3.3.29 contains a CAPTCHA bypass vulnerability that allows…5.3 Medium6.9 MediumN/ANov 12, 2026
CVE-2026-68548: xyproto algernon: Algernon is a small self-contained pure-Go web server9.4 CriticalN/AN/ANov 12, 2026
CVE-2026-52786: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.1 HighN/AN/ANov 12, 2026
CVE-2026-47711: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.6 HighN/AN/ANov 12, 2026
CVE-2026-47710: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.2 HighN/AN/ANov 12, 2026
26-50 of 433023