The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-64675: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems5.3 MediumN/AN/ANov 13, 2026
CVE-2026-62977: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A6.9 MediumN/ANov 13, 2026
CVE-2026-62976: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A8.7 HighN/ANov 13, 2026
CVE-2026-62975: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A6.9 MediumN/ANov 13, 2026
CVE-2026-43626: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority, replacedby CVE-2026-70640.N/AN/AN/ANov 13, 2026
CVE-2026-129217: FRRouting: In FRRouting (FRR) 8.3 through 10.5.1, bgp_notify_decapsulate_hard_reset() in bgpd/bgp_packet.c does not validate the…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-128088: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation2.2 LowN/AN/ANov 13, 2026
CVE-2026-128087: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation3.7 LowN/AN/ANov 13, 2026
CVE-2026-128086: open-telemetry opentelemetry-go: OpenTelemetry-Go is the Go implementation of OpenTelemetry5.3 MediumN/AN/ANov 13, 2026
CVE-2026-128085: open-telemetry: OpenTelemetry-Go is the Go implementation of OpenTelemetry5.3 MediumN/AN/ANov 13, 2026
CVE-2026-128084: sparklemotion sqlite3-ruby: sqlite3 provides Ruby bindings for the SQLite3 embedded database4.8 MediumN/AN/ANov 13, 2026
CVE-2026-128083: laravel framework: Laravel is a web application frameworkN/A2.3 LowN/ANov 13, 2026
CVE-2026-128082: LuckyPennySoftware AutoMapper: AutoMapper is a convention-based object-object mapper in .NET7.5 HighN/AN/ANov 13, 2026
CVE-2026-128081: LuckyPennySoftware AutoMapper: AutoMapper is a convention-based object-object mapper in .NET7.5 HighN/AN/ANov 13, 2026
CVE-2026-128080: open-telemetry opentelemetry-js: OpenTelemetry JavaScript is the OpenTelemetry JavaScript client5.8 MediumN/AN/ANov 13, 2026
CVE-2026-104204: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A8.7 HighN/ANov 13, 2026
CVE-2026-102612: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.1 HighN/AN/ANov 13, 2026
CVE-2026-102537: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systemsN/A7.7 HighN/ANov 13, 2026
CVE-2026-100403: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.5 HighN/AN/ANov 13, 2026
CVE-2026-97361: B. Braun Melsungen AG SpaceCom: There exists an improper privilege management vulnerability that could cause privilege escalation at the SpaceCom and…N/A8.5 HighN/ANov 13, 2026
CVE-2026-97358: B. Braun Melsungen AG SpaceCom: An inclusion of web functionality from an untrusted source could allow remote code execution on SpaceComN/A7.0 HighN/ANov 13, 2026
CVE-2026-97357: B. Braun Melsungen AG SpaceCom: An Out-Of-Bounds Write due to missing input validation is possible in the autoprogramming interface of SpaceCom and…N/A6.9 MediumN/ANov 13, 2026
CVE-2026-63173: Omnispace Agora Project: Omnispace Agora Project through 26.10.0 contains a broken access control vulnerability in which the isAutor() function…5.4 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-129172: tianma-if EdgeEver: EdgeEver 1.9.0 before 2.13.0 contains a stored cross-site scripting vulnerability in the backup restore endpoint PUT…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-129171: likaia NginxPulse: NginxPulse 1.5.0 before 1.6.26 contains an unauthenticated sql injection vulnerability that allows remote attackers to…9.8 Critical9.3 CriticalN/ANov 13, 2026
76-100 of 532044