Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-128886: Red Hat Red Hat Enterprise Linux 10: A flaw was found in dbus when configured with the nonce-tcp transport6.2 MediumN/A0%Nov 13, 2026
CVE-2026-124021: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30.6 contains an authorization bypass vulnerability in the validate()…8.1 High9.2 Critical1%Nov 13, 2026
CVE-2026-124020: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30.6 contains a host header injection vulnerability that allows…8.1 High9.2 Critical1%Nov 13, 2026
CVE-2026-123628: IBM webMethods Integration Server: IBM webMethods Integration Server 10.15 and 11.1 could allow a remote attacker to obtain sensitive information due to…7.5 HighN/A0%Nov 13, 2026
CVE-2026-115788: IBM: IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands is vulnerable to Log Forging on a…8.1 HighN/A0%Nov 13, 2026
CVE-2026-115501: IBM i: IBM i 7.3 7.4, 7.5, and 7.6 is vulnerable to a stack buffer overflow, caused by improper bounds checking in the…5.3 MediumN/A0%Nov 13, 2026
CVE-2026-114468: IBM: IBM App Connect Operator and App Connect Enterprise Certified Containers Operands could allow an attacker with the…6.0 MediumN/A0%Nov 13, 2026
CVE-2026-110331: Red Hat: A flaw was found in abrt7.8 HighN/A0%Nov 13, 2026
CVE-2026-110330: Red Hat: A flaw was found in abrt5.5 MediumN/A0%Nov 13, 2026
CVE-2026-110279: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 is vulnerable to improper credential handling because the…8.1 HighN/A0%Nov 13, 2026
CVE-2026-110278: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.1.0 could allow an attacker to replay identity propagation claims…7.4 HighN/A0%Nov 13, 2026
CVE-2026-110199: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to cross-site scripting4.8 MediumN/A0%Nov 13, 2026
CVE-2026-110195: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow an authenticated caller to bypass upstream…5.4 MediumN/A0%Nov 13, 2026
CVE-2026-110194: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to server-side request forgery (SSRF)5.4 MediumN/A0%Nov 13, 2026
CVE-2026-110189: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.8 through 1.0.11, and v1.1.0 is vulnerable to denial of service due to an incomplete…6.5 MediumN/A0%Nov 13, 2026
CVE-2026-110178: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 is vulnerable to improper access control in the bulk import path4.1 MediumN/A0%Nov 13, 2026
CVE-2026-109158: IBM: IBM App Connect Operator and IBM App Connect Enterprise Certified Containers Operands may allow the AI Agent to log…7.5 HighN/A0%Nov 13, 2026
CVE-2026-108290: IBM Cyber Fraud: IBM Cyber Fraud 1.0.0 through 1.1.0 could allow an attacker with local access to a container to extract sensitive…4.0 MediumN/A0%Nov 13, 2026
CVE-2026-102632: Devolutions PowerShell Universal: Incorrect privilege assignment in the app token management component in Devolutions PowerShell Universal 2026.3.4 and…N/AN/A0%Nov 13, 2026
CVE-2025-53700: Johnson Controls: CWE‑922 Insecure Storage of Sensitive Information vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR…N/A6.3 Medium0%Nov 13, 2026
CVE-2025-53699: Johnson Controls: Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra, Johnson…N/A7.0 High0%Nov 13, 2026
CVE-2025-53698: Johnson Controls: Missing protection mechanism for alternate hardware interface vulnerability in Johnson Controls iSTAR Ultra and Johnson…N/A7.0 High0%Nov 13, 2026
CVE-2025-53697: Johnson Controls: Use of default credentials vulnerability in Johnson Controls iSTAR Ultra, Johnson Controls iSTAR Ultra SE, Johnson…N/A8.4 High0%Nov 13, 2026
CVE-2025-43874: Johnson Controls: : Improper Neutralization of Special Elements used in an OS Command vulnerability in Johnson Controls iSTAR Ultra,…N/A8.7 High1%Nov 13, 2026
CVE-2026-92738: HashiCorp: Vault's Login MFA feature did not consistently enforce the lifetime of pending two-phase login requests6.8 MediumN/A0%Nov 13, 2026
76-100 of 561732