The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115474: zulip: Zulip is an open-source team collaboration tool6.5 MediumN/A0%Nov 4, 2026
CVE-2026-113374: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 does not require realm administration permission when a user creates a Rut Auth capabilityN/A8.6 High0%Nov 4, 2026
CVE-2026-113373: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 Pro does not check the local account status when a user signs in through a configured SAML…N/A9.1 Critical0%Nov 4, 2026
CVE-2026-113372: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 returns the private signing key of a YUM proxy or group repository to an account that holds…N/A7.1 High0%Nov 4, 2026
CVE-2026-113371: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 returns the signing passphrase of an APT or YUM repository, through an internal REST…N/A7.1 High0%Nov 4, 2026
CVE-2026-113370: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 contains a SQL injection vulnerability in the optional "Reindex Search Tables By Pattern"…N/A7.7 High0%Nov 4, 2026
CVE-2026-113369: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 allows a user account that can push manifests to a hosted OCI repository (a user account…N/A6.3 Medium0%Nov 4, 2026
CVE-2026-113368: Sonatype Nexus Repository 3: Sonatype Nexus Repository 3 does not check that a user account is authorized to access a repository before the…N/A5.3 Medium0%Nov 4, 2026
CVE-2026-97701: zulip: Zulip is an open-source team collaboration tool6.5 MediumN/A0%Nov 4, 2026
CVE-2026-82033: deepseek-ai deepseek-harness: DeepSeek Harness prior to 0.1.2-alpha.2, and specifically commit 3e24087, contains a missing authentication…8.4 High8.6 High0%Nov 4, 2026
CVE-2026-63183: omniauth: OmniAuth is a flexible authentication system utilizing Rack middlewareN/A6.9 Medium0%Nov 4, 2026
CVE-2026-122124: Yealink UVC40 E2: On Yealink UVC40 E2 devices before 319.410.0.71, an attacker with short-term physical access can steal Wi‑Fi…6.1 MediumN/A0%Nov 4, 2026
CVE-2026-121932: Linksys E5350: A vulnerability was detected in Linksys E5350 1.0.00.03710.0 Critical9.3 Critical2%Nov 4, 2026
CVE-2026-121931: Linksys WRT54GL: A security vulnerability has been detected in Linksys WRT54GL 4.30.189.1 Critical8.5 High3%Nov 4, 2026
CVE-2026-121930: Linksys WRT54GL: A weakness has been identified in Linksys WRT54GL 4.30.189.1 Critical8.5 High3%Nov 4, 2026
CVE-2026-121929: EmpireSoft EmpireCMS: A security flaw has been discovered in EmpireSoft EmpireCMS up to 8.03.5 Low2.0 Low0%Nov 4, 2026
CVE-2026-121928: InfiniFlow RAGFlow: A vulnerability was identified in InfiniFlow RAGFlow up to 0.27.23.5 Low2.0 Low0%Nov 4, 2026
CVE-2026-113783: espressif esp-idf: ESP-IDF is the Espressif Internet of Things (IOT) Development Framework7.4 HighN/A0%Nov 4, 2026
CVE-2026-113782: espressif esp-idf: ESP-IDF is the Espressif Internet of Things (IOT) Development Framework7.1 HighN/A0%Nov 4, 2026
CVE-2026-107846: bitcoinjs bitcoinjs-lib: bitcoinjs-lib is a JavaScript Bitcoin library for Node.js and browsersN/A9.3 Critical0%Nov 4, 2026
CVE-2026-102345: zammad: Zammad is a web based open source helpdesk/customer support systemN/A5.1 Medium0%Nov 4, 2026
CVE-2026-113780: espressif esp-idf: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework9.3 CriticalN/A0%Nov 4, 2026
CVE-2026-122148: Yealink MeetingBoard Pro: In Yealink MeetingBoard Pro before 331.320.0.64, the Web management module has a front-end validation bypass…N/A8.2 High0%Nov 4, 2026
CVE-2026-82029: invoiceninja: Invoice Ninja before 5.13.28 contains a broken access control vulnerability that allows authenticated vendor-portal…6.5 Medium7.1 High0%Nov 4, 2026
CVE-2026-122118: Yealink: In certain Yealink products before 2026-04-15, when the Wi-Fi AP function is enabled, a default 8-digit numeric PSK…7.4 HighN/A0%Nov 4, 2026
476-500 of 423114
‹›