Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-129173: Stirling-Tools Stirling-PDF: A security flaw has been discovered in Stirling-Tools Stirling-PDF up to 3.3.05.3 Medium6.9 Medium0%Nov 13, 2026
CVE-2026-128134: nltk: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…7.8 HighN/A0%Nov 13, 2026
CVE-2026-9870: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 is vulnerable to cross-site scripting6.1 MediumN/A0%Nov 13, 2026
CVE-2026-9821: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an unauthorized user to inject data into log messages due to improper…5.3 MediumN/A0%Nov 13, 2026
CVE-2026-9661: Poste Italiane Postecert FIRMAOK!: Poste Italiane Postecert FIRMAOK! 1.6.29 on Windows contains a local privilege escalation vulnerability caused by an…7.0 High7.3 High0%Nov 13, 2026
CVE-2026-97683: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 could allow a local attacker to bypass security restrictions due to a missing or…2.5 LowN/A0%Nov 13, 2026
CVE-2026-94407: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is potentially vulnerable to denial of service due to uncontrolled…6.5 MediumN/A0%Nov 13, 2026
CVE-2026-91869: IBM Security QRadar EDR: IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to bypass security…8.1 HighN/A0%Nov 13, 2026
CVE-2026-91868: IBM Security QRadar EDR: IBM Security QRadar EDR 3.12 through 3.12.26 could allow a remote authenticated attacker to obtain sensitive…6.5 MediumN/A0%Nov 13, 2026
CVE-2026-82102: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information…6.4 MediumN/A0%Nov 13, 2026
CVE-2026-5514: IBM Bob: IBM Bob 2.0.3 allows unauthorized extensions to retrieve session tokens via the authentication provider API3.3 LowN/A0%Nov 13, 2026
CVE-2026-19194: HashiCorp Shared library: The HashiCorp cap JWT validation library before version 0.14.0 is vulnerable to a claims validation bypass that may…5.9 MediumN/A0%Nov 13, 2026
CVE-2026-129137: Devolutions PowerShell Universal: Incorrect default permissions in the agent configuration folder in Devolutions PowerShell Universal 2026.3.4 and…N/AN/A0%Nov 13, 2026
CVE-2026-128886: Red Hat Red Hat Enterprise Linux 10: A flaw was found in dbus when configured with the nonce-tcp transport6.2 MediumN/A0%Nov 13, 2026
CVE-2026-124021: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate()…8.1 High9.2 Critical1%Nov 13, 2026
CVE-2026-124020: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows…8.1 High9.2 Critical1%Nov 13, 2026
CVE-2026-123628: IBM webMethods Integration Server: IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information due to…7.5 HighN/A0%Nov 13, 2026
CVE-2026-115788: IBM: IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a…8.1 HighN/A0%Nov 13, 2026
CVE-2026-115501: IBM i: IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in the…5.3 MediumN/A0%Nov 13, 2026
CVE-2026-114468: IBM: IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the…6.0 MediumN/A0%Nov 13, 2026
CVE-2026-110331: Red Hat: A flaw was found in abrt7.8 HighN/A0%Nov 13, 2026
CVE-2026-110330: Red Hat: A flaw was found in abrt5.5 MediumN/A0%Nov 13, 2026
CVE-2026-110279: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the…8.1 HighN/A0%Nov 13, 2026
CVE-2026-110278: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims…7.4 HighN/A0%Nov 13, 2026
CVE-2026-110199: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to cross-site scripting4.8 MediumN/A0%Nov 13, 2026
51-75 of 428324