The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-119924: AWS, Amazon: An out-of-bounds read in the TDS RPC procedure-name parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…8.1 High7.2 HighN/ANov 6, 2026
CVE-2026-119923: AWS, Amazon: A heap-based buffer overflow in the TDS prelogin parser in the Babelfish for PostgreSQL extension versions 1.0-1.5,…9.8 Critical9.3 CriticalN/ANov 6, 2026
CVE-2026-123976: Teunis van Beelen EDFbrowser: EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to…5.5 Medium6.8 MediumN/ANov 6, 2026
CVE-2026-62344: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures7.5 HighN/AN/ANov 6, 2026
CVE-2026-75598: GradleUp shadow: The Gradle Shadow plugin creates fat or uber JARs and supports file transformation and package relocation6.3 MediumN/AN/ANov 6, 2026
CVE-2026-89017: Skyline Communications DataMiner: Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that allows unauthenticated attackers to…7.5 High8.7 HighN/ANov 6, 2026
CVE-2026-123973: SharePoint Products: SharePoint Products CopyMove before 2026-11-06 allows traversal5.0 MediumN/AN/ANov 6, 2026
CVE-2026-119758: Monogramm erpnext_ocr: ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that…6.5 Medium7.1 HighN/ANov 6, 2026
CVE-2026-102650: nuxt content: Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components7.5 HighN/AN/ANov 6, 2026
CVE-2026-102356: yuzutech kroki: Kroki creates diagrams from textual descriptions5.0 MediumN/AN/ANov 6, 2026
CVE-2026-123876: Red Hat: A flaw was found in the default seccomp profile used by Podman via containers-common4.4 MediumN/AN/ANov 6, 2026
CVE-2026-102359: yuzutech kroki: Kroki creates diagrams from textual descriptions7.5 HighN/AN/ANov 6, 2026
CVE-2026-118670: OHIF Viewers: OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages8.8 HighN/AN/ANov 6, 2026
CVE-2026-123824: sensiolabs symfony: The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype,…N/A2.3 LowN/ANov 6, 2026
CVE-2026-49951: infiniflow ragflow: RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force…6.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-123858: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted…4.4 MediumN/AN/ANov 6, 2026
CVE-2026-123857: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection4.3 MediumN/AN/ANov 6, 2026
CVE-2026-123856: JetBrains Toolbox App: In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development…6.5 MediumN/AN/ANov 6, 2026
CVE-2026-123855: JetBrains Toolbox App: In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs7.5 HighN/AN/ANov 6, 2026
CVE-2026-123854: JetBrains PyCharm: In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module5.5 MediumN/AN/ANov 6, 2026
CVE-2026-123853: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM…7.8 HighN/AN/ANov 6, 2026
CVE-2026-123852: JetBrains Junie GitHub Action: In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates7.4 HighN/AN/ANov 6, 2026
CVE-2026-123850: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives3.5 LowN/AN/ANov 6, 2026
CVE-2026-123849: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File…7.0 HighN/AN/ANov 6, 2026
CVE-2026-123847: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command…5.3 MediumN/AN/ANov 6, 2026
76-100 of 425038
‹›