The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-27356: ibericode MC4WP: Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access…5.3 MediumN/AN/ANov 6, 2026
CVE-2026-120851: PublishPress PublishPress Revisions: Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary allows Exploiting Incorrectly…4.3 MediumN/AN/ANov 6, 2026
CVE-2026-119519: WProyal Royal Elementor Addons: Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting…4.3 MediumN/AN/ANov 6, 2026
CVE-2026-122670: WP SYNTEX Polylang: Missing Authorization vulnerability in WP SYNTEX Polylang polylang allows Exploiting Incorrectly Configured Access…5.4 MediumN/AN/ANov 6, 2026
CVE-2026-94619: filegator: FileGator is a multi-user file manager5.9 MediumN/AN/ANov 6, 2026
CVE-2026-94618: filegator: FileGator is a multi-user file manager5.4 MediumN/AN/ANov 6, 2026
CVE-2026-77442: IgnisDa ryot: Ryot is a self-hosted personal tracking application5.9 MediumN/AN/ANov 6, 2026
CVE-2026-69128: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…N/A4.6 MediumN/ANov 6, 2026
CVE-2026-68935: chartbrew: Chartbrew is an open-source web application for creating charts from databases and APIs9.1 CriticalN/AN/ANov 6, 2026
CVE-2026-68933: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…7.5 HighN/AN/ANov 6, 2026
CVE-2026-59104: SPH Engineering UgCS: UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on…9.8 Critical9.3 CriticalN/ANov 6, 2026
CVE-2026-50240: Red Hat: A flaw was found in OpenShift Pipelines-as-Code (PAC)8.8 HighN/AN/ANov 6, 2026
CVE-2026-48057: randombit botan: Botan is a C++ cryptography libraryN/A2.1 LowN/ANov 6, 2026
CVE-2026-47738: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/AN/ANov 6, 2026
CVE-2026-44519: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.1 MediumN/AN/ANov 6, 2026
CVE-2026-123791: OpenBMB Internet of Agents: A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a7.3 High5.5 MediumN/ANov 6, 2026
CVE-2026-123788: chenyme grok2api: A security vulnerability has been detected in chenyme grok2api up to 3.1.64.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-119800: IgnisDa ryot: Ryot is a self-hosted personal tracking application4.3 MediumN/AN/ANov 6, 2026
CVE-2026-104267: randombit botan: Botan is a C++ cryptography libraryN/A4.1 MediumN/ANov 6, 2026
CVE-2026-104254: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/AN/ANov 6, 2026
CVE-2026-103022: urwid: Urwid is a console user interface library for Python5.3 MediumN/AN/ANov 6, 2026
CVE-2026-86044: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLab9.6 CriticalN/AN/ANov 6, 2026
CVE-2026-86005: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…N/A9.3 CriticalN/ANov 6, 2026
CVE-2026-85737: Velocidex velociraptor: Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries6.5 MediumN/AN/ANov 6, 2026
CVE-2026-85736: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…8.1 HighN/AN/ANov 6, 2026
476-500 of 530707
‹›