The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-128122: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte5.9 MediumN/AN/ANov 13, 2026
CVE-2026-128120: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte7.5 HighN/AN/ANov 13, 2026
CVE-2026-128119: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte5.9 MediumN/AN/ANov 13, 2026
CVE-2026-128118: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte7.5 HighN/AN/ANov 13, 2026
CVE-2026-128116: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte5.3 MediumN/AN/ANov 13, 2026
CVE-2026-128100: HashiCorp: Vault Community Edition and Vault Enterprise did not apply explicit ACL policy deny rules to letter case variants of…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-128089: rthalley dnspython: dnspython is a DNS toolkit for Python7.5 HighN/AN/ANov 13, 2026
CVE-2026-127215: Softaculous Kanbanz: Kanbanz by Softaculous plugin for WordPress before 1.0.3 contains a broken access control vulnerability that allows…8.1 High8.6 HighN/ANov 13, 2026
CVE-2026-127214: FlowiseAI Flowise: Flowise through 3.1.4 contains a server-side request forgery vulnerability that allows authenticated attackers with…8.5 High6.3 MediumN/ANov 13, 2026
CVE-2026-128121: sveltejs, @sveltejs: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte5.9 MediumN/AN/ANov 13, 2026
CVE-2026-128117: sveltejs kit: SvelteKit is a framework for rapidly developing robust, performant web applications using Svelte5.9 MediumN/AN/ANov 13, 2026
CVE-2026-97692: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.7 HighN/AN/ANov 13, 2026
CVE-2026-68541: sc2in PolicyPress: PolicyPress is a compliance policy management tool for small and mid-size teamsN/A5.2 MediumN/ANov 13, 2026
CVE-2026-68510: contain-rs bit-vec: bit-vec is a compact vector of bitsN/A6.9 MediumN/ANov 13, 2026
CVE-2026-67444: knrdl hubleys-dashboard: Hubleys is a dashboard for self-hosted servicesN/A7.1 HighN/ANov 13, 2026
CVE-2026-62977: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A6.9 MediumN/ANov 13, 2026
CVE-2026-62976: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A8.7 HighN/ANov 13, 2026
CVE-2026-62975: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A6.9 MediumN/ANov 13, 2026
CVE-2026-43626: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, replacedby CVE-2026-70640.N/AN/AN/ANov 13, 2026
CVE-2026-129217: FRRouting: In FRRouting (FRR) 8.3 through 10.5.1, bgp_notify_decapsulate_hard_reset() in bgpd/bgp_packet.c does not validate the…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-128088: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation2.2 LowN/AN/ANov 13, 2026
CVE-2026-128086: open-telemetry opentelemetry-go: OpenTelemetry-Go is the Go implementation of OpenTelemetry5.3 MediumN/AN/ANov 13, 2026
CVE-2026-128085: open-telemetry: OpenTelemetry-Go is the Go implementation of OpenTelemetry5.3 MediumN/AN/ANov 13, 2026
CVE-2026-128084: sparklemotion sqlite3-ruby: sqlite3 provides Ruby bindings for the SQLite3 embedded database4.8 MediumN/AN/ANov 13, 2026
CVE-2026-128083: laravel framework: Laravel is a web application frameworkN/A2.3 LowN/ANov 13, 2026
51-75 of 532044