The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-63663: dbeaver cloudbeaver: CloudBeaver is a cloud database manager6.5 MediumN/AN/ANov 6, 2026
CVE-2026-58490: TracecatHQ tracecat: Tracecat is an open-source security automation platform for teams and AI agents9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-55649: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data6.3 MediumN/AN/ANov 6, 2026
CVE-2026-55449: dbeaver cloudbeaver: CloudBeaver is a cloud database managerN/A5.3 MediumN/ANov 6, 2026
CVE-2026-46429: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data5.5 MediumN/AN/ANov 6, 2026
CVE-2026-33050: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data8.8 HighN/AN/ANov 6, 2026
CVE-2026-124040: civetweb: CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in…8.1 High9.2 CriticalN/ANov 6, 2026
CVE-2026-124039: gitleaks: Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan…3.3 Low4.8 MediumN/ANov 6, 2026
CVE-2026-124031: gpac: GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() that…5.5 Medium6.8 MediumN/ANov 6, 2026
CVE-2026-124030: gpac: GPAC through 26.07.0 contains a type confusion vulnerability in gf_sg_command_apply() in src/scenegraph/commands.c that…5.5 Medium6.8 MediumN/ANov 6, 2026
CVE-2026-124029: kopia: Kopia through 0.23.1 contains a path traversal vulnerability in copyDirectoryContent that allows users with repository…5.7 Medium6.9 MediumN/ANov 6, 2026
CVE-2026-124028: EricLBuehler mistral.rs: mistral.rs before 0.9.5 contains a delimiter injection vulnerability in mistralrs-core that allows attackers to inject…4.2 Medium2.3 LowN/ANov 6, 2026
CVE-2026-124027: zhimaAi chatwiki: ChatWiki before 2.10.0 contains a missing authentication vulnerability in the GET /manage/getLibRawFileOnePage route…7.5 High8.7 HighN/ANov 6, 2026
CVE-2026-124026: karlomikus bar-assistant: Bar Assistant 6.0.0-rc1 before 6.11.0 contains an incorrect authorization vulnerability in CocktailController::copy…4.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-124025: faveosuite faveo-helpdesk: Faveo Helpdesk through 2.0.3 contains a broken access control vulnerability in TicketController::ticket_print and the…4.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-123974: PyTorch TorchServe: In all versions of PyTorch's TorchServe, a predictable extraction directory in /tmp lets a local user swap the model…7.8 HighN/AN/ANov 6, 2026
CVE-2026-120484: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBERN/AN/AN/ANov 6, 2026
CVE-2026-119217: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBERN/AN/AN/ANov 6, 2026
CVE-2026-109683: TP-Link Systems Inc. Archer BE805 v1: A newline injection vulnerability exists in the UPnP service of Archer BE805 v1 such that an adjacent attacker can…N/A5.3 MediumN/ANov 6, 2026
CVE-2026-90975: Realtek RtUsbA64.sys: A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O…N/AN/AN/ANov 6, 2026
CVE-2026-84473: Kiteworks ownCloud: Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows…N/AN/AN/ANov 6, 2026
CVE-2026-82308: SonicWall SonicOS: A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which…7.5 HighN/AN/ANov 6, 2026
CVE-2026-77709: SonicWall SonicOS: A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS TACACS+ authentication…5.9 MediumN/AN/ANov 6, 2026
CVE-2026-77708: SonicWall SonicOS: A pre-authentication stack-based buffer overflow vulnerability has been identified in the SonicOS TACACS+…5.9 MediumN/AN/ANov 6, 2026
CVE-2026-71495: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures10.0 CriticalN/AN/ANov 6, 2026
526-550 of 426888
‹›