The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123676: xxyopen, 201206030 novel: A vulnerability has been found in xxyopen/201206030 novel up to 3.5.05.3 Medium5.5 MediumN/ANov 6, 2026
CVE-2026-123623: gridaco grida: Grida through 0.0.24 contains a missing authorization vulnerability in the Forms file-preview API routes that allows…5.9 Medium8.2 HighN/ANov 6, 2026
CVE-2026-121623: sensiolabs symfony: The Symfony Serializer component DataUriNormalizer::denormalize() matches the data: scheme with a case-sensitive…N/A8.2 HighN/ANov 6, 2026
CVE-2026-123859: Snowflake: When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality…8.1 HighN/AN/ANov 6, 2026
CVE-2026-123858: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted…4.4 MediumN/AN/ANov 6, 2026
CVE-2026-123857: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection4.3 MediumN/AN/ANov 6, 2026
CVE-2026-123856: JetBrains Toolbox App: In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development…6.5 MediumN/AN/ANov 6, 2026
CVE-2026-123855: JetBrains Toolbox App: In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs7.5 HighN/AN/ANov 6, 2026
CVE-2026-123854: JetBrains PyCharm: In JetBrains PyCharm before 2026.3 code execution was possible in Safe Mode via a crafted Jupyter notebook widget module5.5 MediumN/AN/ANov 6, 2026
CVE-2026-123853: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM…7.8 HighN/AN/ANov 6, 2026
CVE-2026-123852: JetBrains Junie GitHub Action: In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates7.4 HighN/AN/ANov 6, 2026
CVE-2026-123850: JetBrains YouTrack: In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives3.5 LowN/AN/ANov 6, 2026
CVE-2026-123849: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File…7.0 HighN/AN/ANov 6, 2026
CVE-2026-123847: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 command execution was possible via control characters in terminal command…5.3 MediumN/AN/ANov 6, 2026
CVE-2026-123845: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects3.3 LowN/AN/ANov 6, 2026
CVE-2026-123844: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories5.3 MediumN/AN/ANov 6, 2026
CVE-2026-123843: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 untrusted projects could trigger changes to GPG agent configuration3.3 LowN/AN/ANov 6, 2026
CVE-2026-123842: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives7.1 HighN/AN/ANov 6, 2026
CVE-2026-123841: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive7.8 HighN/AN/ANov 6, 2026
CVE-2026-123839: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote…4.7 MediumN/AN/ANov 6, 2026
CVE-2026-123838: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file7.8 HighN/AN/ANov 6, 2026
CVE-2026-123837: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run…7.8 HighN/AN/ANov 6, 2026
CVE-2026-123835: JetBrains Datalore: In JetBrains Datalore before 2026.4 code execution was possible in another user's computation via an init script upload…5.9 MediumN/AN/ANov 6, 2026
CVE-2026-123833: JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 database connections could be established in untrusted projects3.6 LowN/AN/ANov 6, 2026
CVE-2026-123832: JetBrains CLion: In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database9.6 CriticalN/AN/ANov 6, 2026
76-100 of 419658
‹›