The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125108: rack: Rack is a modular Ruby web server interface3.7 LowN/A0%Nov 9, 2026
CVE-2026-77473: ronf asyncssh: AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on…6.5 MediumN/A1%Nov 9, 2026
CVE-2026-102643: ronf asyncssh: AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on…8.8 HighN/A1%Nov 9, 2026
CVE-2026-124996: Turboderp-org ExLlamaV3: A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.36.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-102289: zizmorcore zizmor: zizmor is a static analysis tool for CI/CD systemsN/A7.0 High0%Nov 9, 2026
CVE-2026-61812: owasp-modsecurity ModSecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and NginxN/A6.3 Medium0%Nov 9, 2026
CVE-2026-73857: owasp-modsecurity ModSecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx7.5 HighN/A0%Nov 9, 2026
CVE-2026-104259: owasp-modsecurity ModSecurity: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx5.4 MediumN/A0%Nov 9, 2026
CVE-2026-114032: Illumio Core Ven: The OpenSSL library bundled with the Illumio VEN for Windows is affected by an uncontrolled search path vulnerability7.8 HighN/A0%Nov 9, 2026
CVE-2026-114031: Illumio Core Ven: Incorrect permission assignment allows local privilege escalation to SYSTEM on affected releases of the Illumio VEN for…7.8 HighN/A0%Nov 9, 2026
CVE-2026-125107: julianhille MuhammaraJS: Muhammara is a node module with c/cpp bindings to modify PDF with JavaScript for node or electron7.5 HighN/A0%Nov 9, 2026
CVE-2026-125106: wagtail: Wagtail is an open source content management system built on Django6.5 MediumN/A0%Nov 9, 2026
CVE-2026-125105: wagtail: Wagtail is an open source content management system built on Django3.7 LowN/A0%Nov 9, 2026
CVE-2026-123820: wagtail: Wagtail is an open source content management system built on Django5.3 MediumN/A0%Nov 9, 2026
CVE-2026-63644: xddxdd bird-lg-go: bird-lg-go is a BIRD looking glass in Go7.5 HighN/A0%Nov 9, 2026
CVE-2026-123819: wagtail: Wagtail is an open source content management system built on Django6.5 MediumN/A0%Nov 9, 2026
CVE-2026-123818: InternLM lmdeploy: LMDeploy is a toolkit for compressing, deploying, and serving large language models7.5 HighN/A0%Nov 9, 2026
CVE-2026-123817: aio-libs aiohttp: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and PythonN/A8.7 High0%Nov 9, 2026
CVE-2026-123816: pyload: pyLoad is a free and open-source download manager written in Python8.1 HighN/A0%Nov 9, 2026
CVE-2026-123815: pyload: pyLoad is a free and open-source download manager written in PythonN/A9.4 Critical0%Nov 9, 2026
CVE-2026-123814: pyload: pyLoad is a free and open-source download manager written in Python6.4 MediumN/A0%Nov 9, 2026
CVE-2026-123813: pyload: pyLoad is a free and open-source download manager written in Python7.5 HighN/A0%Nov 9, 2026
CVE-2026-124033: AWS aws-parallelcluster: The export-cluster-logs and export-image-logs commands in the AWS ParallelCluster CLI before version 3.16.0 contain a…6.4 Medium5.9 Medium0%Nov 9, 2026
CVE-2026-123812: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability3.7 LowN/A0%Nov 9, 2026
CVE-2026-123811: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability7.5 HighN/A0%Nov 9, 2026
501-525 of 423720