The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120851: PublishPress PublishPress Revisions: Missing Authorization vulnerability in PublishPress PublishPress Revisions revisionary allows Exploiting Incorrectly…4.3 MediumN/A0%Nov 6, 2026
CVE-2026-120845: WPMU DEV Smush Image Compression and Optimization: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Smush…6.5 MediumN/A0%Nov 6, 2026
CVE-2026-119519: WProyal Royal Elementor Addons: Missing Authorization vulnerability in WProyal Royal Elementor Addons royal-elementor-addons allows Exploiting…4.3 MediumN/A0%Nov 6, 2026
CVE-2026-118786: NXP MCUXpresso SDK: Improper input validation in non-secure-callable (NSC) veneer functions of the NXP MCUXpresso SDK rpmsg-lite multicore…6.8 MediumN/A0%Nov 6, 2026
CVE-2026-118785: NXP MCUXpresso SDK: Improper handling of non-secure-world input in NSC veneer functions of NXP MCUXpresso SDK TrustZone-M examples…6.7 MediumN/A0%Nov 6, 2026
CVE-2026-109469: Microsoft Entra Device Registration: Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to…10.0 CriticalN/A1%Nov 6, 2026
CVE-2026-107931: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 6, 2026
CVE-2026-27356: ibericode MC4WP: Missing Authorization vulnerability in ibericode MC4WP mailchimp-for-wp allows Exploiting Incorrectly Configured Access…5.3 MediumN/A0%Nov 6, 2026
CVE-2026-94619: filegator: FileGator is a multi-user file manager5.9 MediumN/A0%Nov 6, 2026
CVE-2026-94618: filegator: FileGator is a multi-user file manager5.4 MediumN/A0%Nov 6, 2026
CVE-2026-77442: IgnisDa ryot: Ryot is a self-hosted personal tracking application5.9 MediumN/A0%Nov 6, 2026
CVE-2026-69128: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…N/A4.6 Medium0%Nov 6, 2026
CVE-2026-68935: chartbrew: Chartbrew is an open-source web application for creating charts from databases and APIs9.1 CriticalN/A1%Nov 6, 2026
CVE-2026-68933: chartbrew: Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create…7.5 HighN/A0%Nov 6, 2026
CVE-2026-59104: SPH Engineering UgCS: UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on…9.8 Critical9.3 Critical1%Nov 6, 2026
CVE-2026-50240: Red Hat: A flaw was found in OpenShift Pipelines-as-Code (PAC)8.8 HighN/A0%Nov 6, 2026
CVE-2026-48057: randombit botan: Botan is a C++ cryptography libraryN/A2.1 Low0%Nov 6, 2026
CVE-2026-47738: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/A0%Nov 6, 2026
CVE-2026-44519: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.1 MediumN/A0%Nov 6, 2026
CVE-2026-123791: OpenBMB Internet of Agents: A vulnerability was detected in OpenBMB Internet of Agents up to 9d78e88e47160eb42ee1ee8538c05e1c2c47877a7.3 High5.5 Medium0%Nov 6, 2026
CVE-2026-123788: chenyme grok2api: A security vulnerability has been detected in chenyme grok2api up to 3.1.64.3 Medium5.3 Medium0%Nov 6, 2026
CVE-2026-119800: IgnisDa ryot: Ryot is a self-hosted personal tracking application4.3 MediumN/A0%Nov 6, 2026
CVE-2026-104267: randombit botan: Botan is a C++ cryptography libraryN/A4.1 Medium0%Nov 6, 2026
CVE-2026-104254: open-quantum-safe liboqs: liboqs is a C-language cryptographic library that provides implementations of post-quantum cryptography algorithms5.3 MediumN/A0%Nov 6, 2026
CVE-2026-103022: urwid: Urwid is a console user interface library for Python5.3 MediumN/A0%Nov 6, 2026
476-500 of 522604
‹›