The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121031: Google Chrome: Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin…N/AN/AN/ANov 3, 2026
CVE-2026-121030: Google Chrome: Incorrect authorization in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social…9.6 CriticalN/AN/ANov 3, 2026
CVE-2026-121029: Google Chrome: Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site…N/AN/AN/ANov 3, 2026
CVE-2026-120959: MongoDB Atlas SQL: A memory-handling flaw in the MongoDB Atlas SQL ODBC Driver can cause values returned for a query to be written outside…3.7 Low2.1 LowN/ANov 3, 2026
CVE-2026-120952: MongoDB Atlas SQL ODBC Driver: An out-of-bounds write in the MongoDB Atlas SQL ODBC Driver may be triggered when a value of a particular database type…7.1 High6.0 MediumN/ANov 3, 2026
CVE-2026-120734: Devolutions Server: Cleartext transmission of sensitive information in the email configuration test in Devolutions Server 2026.3.13.0 and…N/AN/AN/ANov 3, 2026
CVE-2026-120733: Devolutions Server: Cleartext storage of sensitive information in the user account data in Devolutions Server 2026.3.12.0 and earlier…N/AN/AN/ANov 3, 2026
CVE-2026-120716: Devolutions Server: Insertion of sensitive information into sent data in the identity provider user synchronization in Devolutions Server…N/AN/AN/ANov 3, 2026
CVE-2026-120715: Devolutions Server: Server-side request forgery in the Active Directory credential validation in Devolutions Server 2026.3.12.0 and earlier…N/AN/AN/ANov 3, 2026
CVE-2026-119636: Devolutions Server: Improper release of expired privileged access checkouts in the PAM scheduled check-in task in Devolutions Server…N/AN/AN/ANov 3, 2026
CVE-2026-115878: stanfordnlp stanza: Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human…7.8 HighN/AN/ANov 3, 2026
CVE-2026-115779: Effect-TS, @effect: Effect is a TypeScript framework that consists of several packages that work together to help build TypeScript…N/A6.3 MediumN/ANov 3, 2026
CVE-2026-115732: Perforce Puppet Enterprise: Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in…N/A9.0 CriticalN/ANov 3, 2026
CVE-2026-115731: Perforce Puppet Enterprise: Deserialization of untrusted data in the report-processing code of Puppet, as used by Puppet Server, in the affected…N/A9.4 CriticalN/ANov 3, 2026
CVE-2026-111754: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A5.1 MediumN/ANov 3, 2026
CVE-2026-111752: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A8.2 HighN/ANov 3, 2026
CVE-2026-111751: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…N/A8.2 HighN/ANov 3, 2026
CVE-2026-95777: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in the management interface of HPE Networking Fabric Composer3.1 LowN/AN/ANov 3, 2026
CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…3.1 LowN/AN/ANov 3, 2026
CVE-2026-95775: Hewlett Packard Enterprise (HPE) Fabric Composer: A local information disclosure vulnerability exists in the underlying operating system of HPE Networking Fabric Composer3.3 LowN/AN/ANov 3, 2026
CVE-2026-95774: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability exists in HPE Networking Fabric Composer3.7 LowN/AN/ANov 3, 2026
CVE-2026-95773: Hewlett Packard Enterprise (HPE) Fabric Composer: A denial-of-service vulnerability has been identified in HPE Networking Fabric Composer3.8 LowN/AN/ANov 3, 2026
CVE-2026-95772: Hewlett Packard Enterprise (HPE) Fabric Composer: A race condition vulnerability exists in the API of HPE Networking Fabric Composer4.2 MediumN/AN/ANov 3, 2026
CVE-2026-95771: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated information disclosure vulnerability exists in an API endpoint of HPE Networking Fabric Composer4.3 MediumN/AN/ANov 3, 2026
CVE-2026-95770: Hewlett Packard Enterprise (HPE) Fabric Composer: A sensitive information disclosure vulnerability in the underlying operating system of HPE Networking Fabric Composer…4.7 MediumN/AN/ANov 3, 2026
551-575 of 560630
‹›