The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-84237: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to…3.1 LowN/AN/ANov 8, 2026
CVE-2026-84229: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-84228: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to…3.1 LowN/AN/ANov 8, 2026
CVE-2026-84030: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper…5.6 MediumN/AN/ANov 8, 2026
CVE-2026-82830: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to…6.7 MediumN/AN/ANov 8, 2026
CVE-2026-81542: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due…6.4 MediumN/AN/ANov 8, 2026
CVE-2026-81209: IBM: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1, 6.2.2.0 - 6.2.2.1_1 and IBM Sterling File Gateway 6.2.1.0…4.9 MediumN/AN/ANov 8, 2026
CVE-2026-80435: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information…5.0 MediumN/AN/ANov 8, 2026
CVE-2026-78636: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server Liberty 17.0.0.3 through 26.0.0.10 is affected by an information disclosure…4.3 MediumN/AN/ANov 8, 2026
CVE-2026-78537: IBM Guardium Key Lifecycle Manager: IBM Guardium Key Lifecycle Manager 4.1, 4.1.1, 4.2, 4.2.1, 5.0, and 5.1 could allow a local attacker to obtain…6.8 MediumN/AN/ANov 8, 2026
CVE-2026-77153: IBM i: IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to obtain sensitive information from the…4.8 MediumN/AN/ANov 8, 2026
CVE-2026-75879: IBM Content Navigator: IBM Content Navigator 3.0.15.0, 26.0.0.0, 3.1.0.0, and 3.2.0.0 is vulnerable to LDAP injection4.3 MediumN/AN/ANov 8, 2026
CVE-2026-6715: IBM Concert: IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating…9.8 CriticalN/AN/ANov 8, 2026
CVE-2026-3684: IBM Cloud Pak for Data System: IBM Cloud Pak for Data System 11.3.1.2 Interim Fix 001 through - 11.3.1.2 Interim Fix 002 could allow a user with…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-2700: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows…4.3 MediumN/AN/ANov 8, 2026
CVE-2026-2477: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data: IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 fails to enforce…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-19307: IBM: IBM Sterling B2B Integrator 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 through 6.2.2.1_1, and IBM Sterling File Gateway…4.3 MediumN/AN/ANov 8, 2026
CVE-2026-19133: IBM Storage TS4500 Library: IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to perform unauthorized…8.1 HighN/AN/ANov 8, 2026
CVE-2026-18893: IBM CockroachDB PostgreSQL for IBM VPC: IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is…7.1 HighN/AN/ANov 8, 2026
CVE-2026-76052: IBM: IBM Storage Scale System 6.2.3.0 through 6.2.3.6, and 7.0.0.0 through 7.0.1.0 and IBM Storage Scale 6.0.0.0 through…6.0 MediumN/AN/ANov 8, 2026
CVE-2026-18668: IBM Sterling File Gateway: IBM Sterling File Gateway 6.2.1.0 through 6.2.1.2_1 and 6.2.2.0 - 6.2.2.1_1 could allow a remote attacker to perform…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-18546: IBM CockroachDB PostgreSQL for IBM VPC: IBM CockroachDB PostgreSQL for IBM VPC 26.2.0 through 26.2.3, 25.4.0 through 25.4.12, and 25.2.0 through 25.2.20 is…5.4 MediumN/AN/ANov 8, 2026
CVE-2026-18525: IBM Secure Proxy: IBM Secure Proxy 6.1.0.0 through 6.2.1.2 could allow a remote authenticated attacker to cause a denial of service due…4.9 MediumN/AN/ANov 8, 2026
CVE-2026-18484: IBM ContextForge MCP Gateway: IBM ContextForge MCP Gateway 1.0.0 through 1.0.11 could allow a remote authenticated attacker to cause a denial of…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-18196: IBM App Connect Enterprise: IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2, and 12.0.1.0 through 12.0.12.30 could allow a remote attacker to…5.4 MediumN/AN/ANov 8, 2026
76-100 of 418829
‹›