The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115762: jgraph drawio: draw.io is a configurable diagramming and whiteboarding application6.1 MediumN/AN/ANov 4, 2026
CVE-2026-115758: sumatrapdfreader sumatrapdf: SumatraPDF is a multi-format reader for WindowsN/A8.2 HighN/ANov 4, 2026
CVE-2026-110283: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-110282: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-110281: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an…5.9 MediumN/AN/ANov 4, 2026
CVE-2026-10859: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.5 HighN/AN/ANov 4, 2026
CVE-2026-108910: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-108838: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to…3.3 LowN/AN/ANov 4, 2026
CVE-2026-108767: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-108588: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-108536: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…4.6 MediumN/AN/ANov 4, 2026
CVE-2026-105991: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…3.5 LowN/AN/ANov 4, 2026
CVE-2026-105702: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-104203: traccar: Traccar is an open source GPS tracking system7.5 HighN/AN/ANov 4, 2026
CVE-2026-102664: sysown proxysql: ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL7.1 HighN/AN/ANov 4, 2026
CVE-2026-102340: telepresenceio telepresence: Telepresence enables local development against a remote Kubernetes or OpenShift cluster8.5 HighN/AN/ANov 4, 2026
CVE-2026-102339: telepresenceio telepresence: Telepresence enables local development against a remote Kubernetes or OpenShift cluster8.2 HighN/AN/ANov 4, 2026
CVE-2025-71457: vtenext: vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 CriticalN/ANov 4, 2026
CVE-2025-71456: vtenext: vtenext before 25.02.2 contains an SQL injection vulnerability that allows authenticated low-privileged users to inject…8.1 High8.6 HighN/ANov 4, 2026
CVE-2025-71455: vtenext: vtenext before 25.02.2 contains a session identifier disclosure vulnerability that allows attackers to read the…5.3 Medium5.9 MediumN/ANov 4, 2026
CVE-2025-71454: vtenext: vtenext before 25.02.2 contains a cross-site request forgery protection bypass because csrf_check() in…6.5 Medium6.9 MediumN/ANov 4, 2026
CVE-2025-71453: vtenext: vtenext before 25.02.2 contains a reflected cross-site scripting vulnerability in modules/Home/HomeWidgetBlockList.php…6.1 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-102895: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-122015: NPC-Worldwide npcpy: A vulnerability was found in NPC-Worldwide npcpy up to 2.1.276.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-97693: xerrors Yuxi: Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform9.9 CriticalN/AN/ANov 4, 2026
51-75 of 418286
‹›