The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-82418: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to…9.8 CriticalN/A0%Nov 4, 2026
CVE-2026-19319: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information…5.3 MediumN/A0%Nov 4, 2026
CVE-2026-18142: Integer Overflow or Wraparound7.1 HighN/A0%Nov 4, 2026
CVE-2026-17493: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due…7.5 HighN/A0%Nov 4, 2026
CVE-2026-16725: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary…6.5 MediumN/A0%Nov 4, 2026
CVE-2026-14252: Insertion of Sensitive Information into Log File6.2 MediumN/A0%Nov 4, 2026
CVE-2026-13292: External Control of System or Configuration Setting8.8 HighN/A0%Nov 4, 2026
CVE-2026-13289: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Nov 4, 2026
CVE-2026-13284: Improper Restriction of XML External Entity Reference7.1 HighN/A0%Nov 4, 2026
CVE-2026-13271: Improper Restriction of XML External Entity Reference8.1 HighN/A0%Nov 4, 2026
CVE-2026-12550: Heap-based Buffer Overflow5.4 MediumN/A0%Nov 4, 2026
CVE-2026-12538: Buffer Underwrite5.4 MediumN/A0%Nov 4, 2026
CVE-2026-12356: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A0%Nov 4, 2026
CVE-2026-122235: janhq jan: Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows…4.7 Medium5.7 Medium0%Nov 4, 2026
CVE-2026-122234: benjamine jsondiffpatch: jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by…4.7 Medium2.3 Low0%Nov 4, 2026
CVE-2026-122233: php frankenphp: FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP…3.7 Low6.3 Medium0%Nov 4, 2026
CVE-2026-122224: Missing Authorization8.1 High7.2 High0%Nov 4, 2026
CVE-2026-122140: Server-Side Request Forgery (SSRF)5.8 Medium6.3 Medium0%Nov 4, 2026
CVE-2026-122139: Observable Response Discrepancy5.3 Medium6.9 Medium0%Nov 4, 2026
CVE-2026-122138: Improper Restriction of Excessive Authentication Attempts5.3 Medium6.3 Medium0%Nov 4, 2026
CVE-2026-122137: Insecure Temporary File6.7 Medium5.4 Medium0%Nov 4, 2026
CVE-2026-122136: Improper Link Resolution Before File Access4.4 Medium4.1 Medium0%Nov 4, 2026
CVE-2026-122135: Inclusion of Functionality from Untrusted Control Sphere8.8 High8.6 High0%Nov 4, 2026
CVE-2026-122134: Inclusion of Functionality from Untrusted Control Sphere8.8 High8.6 High0%Nov 4, 2026
CVE-2026-122133: Uncontrolled Search Path Element8.8 High8.6 High0%Nov 4, 2026
826-850 of 555437
‹›