The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-119274: Infoblox NIOS: Infoblox NIOS version upto 9.1.0 contain a vulnerability related to improper input validation that allows a stored XSS4.8 MediumN/AN/ANov 9, 2026
CVE-2026-124636: kevquirk PureBlog: A security flaw has been discovered in kevquirk PureBlog up to 3.7.23.8 Low5.1 MediumN/ANov 9, 2026
CVE-2026-95779: Hewlett Packard Enterprise (HPE) HPE Morpheus Software: An exposure of the appliance’s confidential certificate information vulnerability exists in HPE Morpheus manager…8.8 HighN/AN/ANov 9, 2026
CVE-2026-95778: Hewlett Packard Enterprise (HPE) HPE Morpheus Software: A remote code execution vulnerability exists in HPE Morpheus Software.8.8 HighN/AN/ANov 9, 2026
CVE-2026-95648: C-Prot Inc. C-Prot AppDefense: Improperly controlled modification of Dynamically-Determined object attributes vulnerability in C-Prot Inc8.1 HighN/AN/ANov 9, 2026
CVE-2026-124622: olivier-ls PHP-FTS: A vulnerability was identified in olivier-ls PHP-FTS up to 1.1.35.3 Medium4.8 MediumN/ANov 9, 2026
CVE-2026-124079: rConfig: rConfig Core 8.0.0 before 8.2.19 and rConfig Pro before 8.4.1 contain a deserialization of untrusted data vulnerability…9.8 Critical9.3 CriticalN/ANov 9, 2026
CVE-2026-121611: Red Hat: A flaw was found in GStreamer's gst-plugins-bad package6.5 MediumN/AN/ANov 9, 2026
CVE-2026-119613: ash-project ash_ai: Generation of Error Message Containing Sensitive Information vulnerability in ash-project ash_ai allows a caller of an…N/A5.3 MediumN/ANov 9, 2026
CVE-2026-119610: Red Hat: A flaw was found in GStreamer's gst-plugins-good, specifically in the H.264 RTP depayloader element8.2 HighN/AN/ANov 9, 2026
CVE-2026-118792: CompuGroup Medical Wingesfar: Default credentials permit access through AcuXDBC.N/A6.1 MediumN/ANov 9, 2026
CVE-2026-118791: CompuGroup Medical Wingesfar: The application implements software update functionality without adequate authenticity and integrity validation,…N/A7.2 HighN/ANov 9, 2026
CVE-2026-118790: CompuGroup Medical Wingesfar: Multiple hardcoded credentials are embedded within product components and administrative functionalitiesN/A7.2 HighN/ANov 9, 2026
CVE-2026-112171: GALENO SISTEMI MAGISTRA: An attacker can inject malicious SQL statements through user-controlled input, allowing unauthorized access to,…N/A4.4 MediumN/ANov 9, 2026
CVE-2026-112170: GALENO SISTEMI MAGISTRA: The software downloads upgrade files without performing integrity checks, allowing the installation of tampered updates.N/A6.3 MediumN/ANov 9, 2026
CVE-2026-112169: GALENO SISTEMI MAGISTRA: Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a…N/A6.1 MediumN/ANov 9, 2026
CVE-2026-112168: GALENO SISTEMI MAGISTRA: The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database,…N/A6.0 MediumN/ANov 9, 2026
CVE-2026-121601: Red Hat: A flaw was found in GStreamer's MXF demuxer plugin (gst-plugins-bad)6.1 MediumN/AN/ANov 9, 2026
CVE-2026-124623: n/a PipraPay: A security flaw has been discovered in PipraPay 3.0.04.7 Medium2.0 LowN/ANov 9, 2026
CVE-2026-122673: Wpmet ShopEngine: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wpmet ShopEngine…6.5 MediumN/AN/ANov 9, 2026
CVE-2026-112205: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Bruteforce Protection Bypass in the login functionalityN/A6.9 MediumN/ANov 9, 2026
CVE-2026-112204: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Reflected XSS in the /index.php endpointN/A5.1 MediumN/ANov 9, 2026
CVE-2026-110469: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/upload.php endpointN/A10.0 CriticalN/ANov 9, 2026
CVE-2026-110468: Fundacja Widzialni WidzialniCMS: WidzialniCMS is vulnerable to Unrestricted File Upload in the /panel/controllers/save_photo.php endpointN/A10.0 CriticalN/ANov 9, 2026
CVE-2026-124684: Samsung Open Source Escargot: Use after free vulnerability in Samsung Open Source Escargot allows Pointer Manipulation5.1 MediumN/AN/ANov 9, 2026
476-500 of 427771
‹›