The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 High0%Nov 5, 2026
CVE-2026-100359: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/A0%Nov 5, 2026
CVE-2026-100358: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A9.4 Critical0%Nov 5, 2026
CVE-2026-97175: Red Hat: A flaw was found in the idp-auto-link authenticator of the keycloak-services component, which handles user identity…8.8 HighN/A0%Nov 5, 2026
CVE-2026-54912: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A8.8 High0%Nov 5, 2026
CVE-2026-123184: Altium Altium 365: An incorrect authorization vulnerability exists in the Altium 365 Git Service8.1 High7.2 High0%Nov 5, 2026
CVE-2026-121949: sensiolabs symfony: The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes,…5.4 Medium2.3 Low0%Nov 5, 2026
CVE-2026-115452: tassos.gr: Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack…6.7 Medium7.5 High0%Nov 5, 2026
CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…6.3 Medium5.8 Medium0%Nov 5, 2026
CVE-2026-112109: Thalesgroup Safenet Authentication Client Service: A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an…7.0 High7.3 High0%Nov 5, 2026
CVE-2026-107903: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Stored XSS in reviews via inconsistent sanitization in Gridbox < 2.20.5.08.3 High8.6 High0%Nov 5, 2026
CVE-2026-107359: Silicon Labs WF200 FW: Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a…6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-107130: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0N/A6.9 Medium0%Nov 5, 2026
CVE-2026-107129: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.05.5 Medium8.3 High0%Nov 5, 2026
CVE-2026-105607: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox…8.3 High8.6 High0%Nov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…2.7 LowN/A0%Nov 5, 2026
CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes applicationN/A5.9 Medium0%Nov 5, 2026
CVE-2026-54913: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A6.9 Medium0%Nov 5, 2026
CVE-2026-54914: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A8.3 High0%Nov 5, 2026
CVE-2026-77439: immich-app immich: Immich is a self-hosted photo and video management solution8.8 HighN/A1%Nov 5, 2026
CVE-2026-97371: ntop ntopng: ntopng is a web-based network traffic monitoring application5.3 MediumN/A0%Nov 5, 2026
CVE-2026-75614: esa asn1scc: ASN1SCC is an open source ASN.1 compiler for embedded systems8.1 HighN/A1%Nov 5, 2026
CVE-2026-54144: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library6.1 MediumN/A0%Nov 5, 2026
CVE-2026-54142: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.7 HighN/A1%Nov 5, 2026
CVE-2026-49405: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library6.2 MediumN/A0%Nov 5, 2026
576-600 of 425038
‹›