The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123206: aozorae EdgeChat: EdgeChat before 2.20.3 contains a missing authentication vulnerability in the GET /files/:key route that allows…3.7 Low6.3 MediumN/ANov 5, 2026
CVE-2026-123205: accel-ppp: accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that…6.5 Medium8.3 HighN/ANov 5, 2026
CVE-2026-123204: goposta posta: Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit…4.3 Medium5.3 MediumN/ANov 5, 2026
CVE-2026-123203: neuronsimulator NEURON: NEURON (CoreNEURON) through 9.0.2 contains a stack buffer overflow vulnerability that allows attackers to corrupt stack…6.1 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-123202: bakulf libnxml: libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in src/nxml_parser.c that allows remote…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-123201: jarun buku: Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows…5.3 Medium6.3 MediumN/ANov 5, 2026
CVE-2026-123200: VRPN: VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_Endpoint::handle_sender_message() and…7.5 High8.7 HighN/ANov 5, 2026
CVE-2026-123199: book-readers eBook-speaker: eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in get_attributes() in src/common.c…5.5 Medium6.8 MediumN/ANov 5, 2026
CVE-2026-123198: LMFDB: LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that…9.8 Critical9.3 CriticalN/ANov 5, 2026
CVE-2026-123197: wppconnect wppconnect-server: WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers…5.3 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-123196: authorizerdev authorizer: Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to…8.1 High8.6 HighN/ANov 5, 2026
CVE-2026-123135: langgenius dify: A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.26.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-118494: jreviews.com JReviews component for Joomla: Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 -…N/A8.2 HighN/ANov 5, 2026
CVE-2026-116574: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…5.9 MediumN/AN/ANov 5, 2026
CVE-2026-116573: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform6.5 MediumN/AN/ANov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…2.7 LowN/AN/ANov 5, 2026
CVE-2026-115451: tassos.gr: Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension…6.5 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-100365: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-100364: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-100363: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-100362: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A6.9 MediumN/ANov 5, 2026
CVE-2026-100361: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 HighN/ANov 5, 2026
CVE-2026-100359: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-100358: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A9.4 CriticalN/ANov 5, 2026
76-100 of 423114
‹›