The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123304: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution in untrusted projects via a configured ShellCheck path7.8 HighN/AN/ANov 6, 2026
CVE-2026-123302: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4, 2026.1.5.1, 2025.3.6.2 code execution was possible in untrusted…7.8 HighN/AN/ANov 6, 2026
CVE-2026-123298: JetBrains Hub: In JetBrains Hub before 2026.2.52556 sMTP command injection via email verification was possible5.0 MediumN/AN/ANov 6, 2026
CVE-2026-123297: JetBrains Hub: In JetBrains Hub before 2026.2.52519 two-factor authentication bypass was possible via the password reset flow6.8 MediumN/AN/ANov 6, 2026
CVE-2026-123296: JetBrains Hub: In JetBrains Hub before 2026.2.52519 privilege escalation via forged email verification was possible7.5 HighN/AN/ANov 6, 2026
CVE-2026-123295: JetBrains Hub: In JetBrains Hub before 2026.2.52519 enforced two-factor authentication could be disabled via the profile update…8.1 HighN/AN/ANov 6, 2026
CVE-2026-123294: JetBrains Hub: In JetBrains Hub before 2026.2.52556 privilege escalation was possible by changing email authentication details during…9.6 CriticalN/AN/ANov 6, 2026
CVE-2026-123293: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 code execution was possible in untrusted projects via the Terraform…7.8 HighN/AN/ANov 6, 2026
CVE-2026-123278: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via the unauthenticated JDBC worker RMI endpoint6.7 MediumN/AN/ANov 6, 2026
CVE-2026-123276: JetBrains CLion: In JetBrains CLion before 2026.3, 2026.2.4.1 code execution was possible in Safe Mode via a crafted GDB server debug…7.8 HighN/AN/ANov 6, 2026
CVE-2026-84155: Ericsson CodeChecker: CodeChecker's web server fails to fully invalidate a session token on logout when the server runs with more than one…N/A5.3 MediumN/ANov 6, 2026
CVE-2026-66294: qcam saxy: XML injection in the Saxy XML encoderN/A2.1 LowN/ANov 6, 2026
CVE-2026-66295: qcam saxy: Saxy's XML encoder writes the target and the content of a processing instruction into the output document verbatim,…N/A2.1 LowN/ANov 6, 2026
CVE-2026-66293: qcam saxy: XML injection in the encoder of SaxyN/A2.1 LowN/ANov 6, 2026
CVE-2026-97642: man4toman Parsi Date | بسته فارسی ساز وردپرس و ووکامرس پارسی دیت: The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calendar Gutenberg block's…6.4 MediumN/A0%Nov 6, 2026
CVE-2026-87964: wahid0003: The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI & Social Channels plugin for WordPress…7.2 HighN/A1%Nov 6, 2026
CVE-2026-123087: Atmira SIREC: SQL injection vulnerability in Atmira’s SIRECN/A8.7 High0%Nov 6, 2026
CVE-2026-120659: themeisle Redirection for Contact Form 7: The Redirection for Contact Form 7 plugin for WordPress is vulnerable to authorization bypass in all versions up to,…5.3 MediumN/A0%Nov 6, 2026
CVE-2026-120550: wpusermanager: The WP User Manager – Registration Form, Login Form, User Profile Builder & Member Directory plugin for WordPress is…6.4 MediumN/A0%Nov 6, 2026
CVE-2026-120474: undici: undici is an HTTP client for Node.js6.5 MediumN/A0%Nov 6, 2026
CVE-2026-120423: undici: undici is an HTTP client for Node.js5.9 MediumN/AN/ANov 6, 2026
CVE-2026-120415: undici: undici is an HTTP client for Node.js5.9 MediumN/AN/ANov 6, 2026
CVE-2026-120222: undici: undici is an HTTP client for Node.js5.9 MediumN/AN/ANov 6, 2026
CVE-2026-116592: undici: undici is an HTTP client for Node.js7.4 HighN/AN/ANov 6, 2026
CVE-2026-110776: realmag777 MDTF – Meta Data and Taxonomies Filter: The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…7.2 HighN/A0%Nov 6, 2026
601-625 of 425038
‹›