The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-99250: Linux: In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been…N/AN/AN/ANov 3, 2026
CVE-2026-99249: Linux: In the Linux kernel, the following vulnerability has been resolved: pid_namespace: make zap_pid_ns_processes()…N/AN/AN/ANov 3, 2026
CVE-2026-99248: Linux: In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: restore non-managed runtime PM to fix…N/AN/AN/ANov 3, 2026
CVE-2026-99247: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Do not initialize tracefs work if tracing…N/AN/AN/ANov 3, 2026
CVE-2026-99246: Linux: In the Linux kernel, the following vulnerability has been resolved: tipc: protect node reset trace dump with node lock…8.1 HighN/AN/ANov 3, 2026
CVE-2026-99245: Linux: In the Linux kernel, the following vulnerability has been resolved: KEYS: Fix key_reject_and_link() race with keyring…N/AN/AN/ANov 3, 2026
CVE-2026-99244: Linux: In the Linux kernel, the following vulnerability has been resolved: pid_namespace: prevent TIF_NOTIFY_SIGNAL from…N/AN/AN/ANov 3, 2026
CVE-2026-99243: Linux: In the Linux kernel, the following vulnerability has been resolved: io-wq: order the exit bit against worker creation…N/AN/AN/ANov 3, 2026
CVE-2026-114442: Apache Software Foundation Apache HertzBeat: Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP…N/AN/AN/ANov 3, 2026
CVE-2026-89293: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.2.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…N/A8.8 HighN/ANov 3, 2026
CVE-2026-89292: Eclipse Foundation Eclipse Mnestix: In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker…N/A9.2 CriticalN/ANov 3, 2026
CVE-2026-89229: vivo BlueLM Copilot: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…N/A5.1 MediumN/ANov 3, 2026
CVE-2026-77778: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions up to 7150 allow authenticated users to export certificates belonging…7.1 HighN/AN/ANov 3, 2026
CVE-2026-77777: Zohocorp ManageEngine Key Manager Plus: ManageEngine Key Manager Plus versions before 7151 are vulnerable to an improper access control issue that allow…7.1 HighN/AN/ANov 3, 2026
CVE-2026-77691: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when…8.1 HighN/AN/ANov 3, 2026
CVE-2026-120333: TYPO3 Extension "Frontend User Registration": The actions linked in the emails of the extension (e.gN/A8.8 HighN/ANov 3, 2026
CVE-2026-120332: TYPO3 Extension "Mail": The HTML content of mails and tracked URLs are rendered unescaped in the backend moduleN/A5.1 MediumN/ANov 3, 2026
CVE-2026-120331: TYPO3 Extension "Mail": Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the…N/A5.3 MediumN/ANov 3, 2026
CVE-2026-120330: TYPO3 Extension "Mail": Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the…N/A7.1 HighN/ANov 3, 2026
CVE-2026-120329: TYPO3 Extension "Mail": Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting…N/A5.3 MediumN/ANov 3, 2026
CVE-2026-120328: TYPO3 Extension "Mail": The click tracking middleware does not validate the authentication code of a recipient if the code is omittedN/A6.9 MediumN/ANov 3, 2026
CVE-2026-120327: TYPO3 Extension "Mail": The click tracking middleware accepts an arbitrary target URL and redirects to itN/A5.3 MediumN/ANov 3, 2026
CVE-2026-119843: Red Hat, GStreamer project: A flaw was found in GStreamer's gst-plugins-good package6.5 MediumN/AN/ANov 3, 2026
CVE-2026-119724: Apache Software Foundation Apache JClouds: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')…N/AN/AN/ANov 3, 2026
CVE-2026-119641: Apache Software Foundation Apache Oozie: ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache OozieN/AN/AN/ANov 3, 2026
651-675 of 528356
‹›