The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-17371: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…5.0 MediumN/A0%Nov 7, 2026
CVE-2026-17368: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…6.8 MediumN/A0%Nov 7, 2026
CVE-2026-17366: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…5.0 MediumN/A0%Nov 7, 2026
CVE-2026-17363: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17361: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17345: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17331: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to read arbitrary files on the server due to…7.5 HighN/A1%Nov 7, 2026
CVE-2026-17323: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to XML…8.2 HighN/A1%Nov 7, 2026
CVE-2026-17320: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17318: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17314: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to obtain sensitive information…5.0 MediumN/A0%Nov 7, 2026
CVE-2026-17310: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to obtain sensitive information due to the use…6.5 MediumN/A0%Nov 7, 2026
CVE-2026-17307: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…6.5 MediumN/A0%Nov 7, 2026
CVE-2026-17302: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to probe internal network…5.0 MediumN/A0%Nov 7, 2026
CVE-2026-17295: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A1%Nov 7, 2026
CVE-2026-17289: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17285: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17283: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17282: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17281: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A0%Nov 7, 2026
CVE-2026-17279: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…7.7 HighN/A1%Nov 7, 2026
CVE-2026-17241: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…6.5 MediumN/A0%Nov 7, 2026
CVE-2026-17215: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…4.3 MediumN/A0%Nov 7, 2026
CVE-2026-17211: IBM API Connect: IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to…4.3 MediumN/A0%Nov 7, 2026
CVE-2026-17202: IBM API Connect: IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to enumerate usernames due to observable…5.3 MediumN/A0%Nov 7, 2026
551-575 of 522604
‹›