The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-114187: WPVibes AnyWhere Elementor: Missing Authorization vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows Exploiting Incorrectly…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-114185: WPVibes AnyWhere Elementor: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPVibes AnyWhere…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-114183: WPVibes AnyWhere Elementor: Insertion of Sensitive Information Into Sent Data vulnerability in WPVibes AnyWhere Elementor anywhere-elementor allows…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-109594: SonicWall Global Management System (GMS): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…6.8 MediumN/AN/ANov 3, 2026
CVE-2026-109593: SonicWall Global Management System (GMS): An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…9.1 CriticalN/AN/ANov 3, 2026
CVE-2026-103916: Docker Docker Sandboxes: Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspaceN/A8.4 HighN/ANov 3, 2026
CVE-2026-103077: myCred: Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-97350: Securepoint Securepoint SSL VPN Client v2: Securepoint SSL VPN Client v2 on Windows contains vulnerabilities in the handling of OpenVPN configurations and proxy…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-73328: volmarg personal-management-system: Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-65168: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.7.0 HighN/AN/ANov 3, 2026
Debian: CVE-2026-65165: slurm-wlm -- security update5.3 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65140: slurm-wlm -- security update5.7 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65139: slurm-wlm -- security update6.3 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65138: slurm-wlm -- security update6.3 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65109: slurm-wlm -- security update4.7 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65108: slurm-wlm -- security update6.3 MediumN/AN/ANov 3, 2026
Debian: CVE-2026-65107: slurm-wlm -- security update6.3 MediumN/AN/ANov 3, 2026
CVE-2026-121578: Amidaware Tactical RMM: Tactical RMM contains a stored XSS vulnerability caused by improperly validated input or encode output for various…6.1 MediumN/AN/ANov 3, 2026
CVE-2026-121564: lucasrodes whatstk: Incomplete Comparison with Missing Factors (CWE-1023) in merge_chats() (whatstk/utils/chat_merge.py), reached from…N/A1.8 LowN/ANov 3, 2026
CVE-2026-121562: CTFd: CTFd 3.1.0 before 3.8.7 contains an information disclosure vulnerability in the /api/v1/teams list endpoint that…5.3 Medium6.9 MediumN/ANov 3, 2026
CVE-2026-121561: HumanSignal: Label Studio before 1.23.2 (label-studio-sdk before 2.1.2) contains a server-side request forgery vulnerability that…7.7 High6.3 MediumN/ANov 3, 2026
CVE-2026-121560: logchimp: LogChimp 0.9.0-alpha.1 before 0.9.3 contains an authorization bypass vulnerability that allows authenticated post…7.1 High7.1 HighN/ANov 3, 2026
CVE-2026-121559: glpi-project GLPI: GLPI 10.0.0 before 10.0.28 and 11.0.0 before 11.0.10 contains a privilege escalation vulnerability that allows…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-121558: Ricky-7-Yan intelligent-audit-system: AuditPilot before commit 4669c93 contains an authorization bypass vulnerability in _metadata_allowed in…4.3 Medium2.3 LowN/ANov 3, 2026
CVE-2026-121557: wppconnect wppconnect-server: WPPConnect Server through 2.10.74 contains a missing authentication vulnerability that allows unauthenticated attackers…5.9 Medium8.2 HighN/ANov 3, 2026
726-750 of 420977
‹›