The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-105607: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox…8.3 High8.6 High0%Nov 5, 2026
CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes applicationN/A5.9 Medium0%Nov 5, 2026
CVE-2026-54913: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A6.9 Medium0%Nov 5, 2026
CVE-2026-54914: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A8.3 High0%Nov 5, 2026
CVE-2026-77439: immich-app immich: Immich is a self-hosted photo and video management solution8.8 HighN/A1%Nov 5, 2026
CVE-2026-97371: ntop ntopng: ntopng is a web-based network traffic monitoring application5.3 MediumN/A0%Nov 5, 2026
CVE-2026-75614: esa asn1scc: ASN1SCC is an open source ASN.1 compiler for embedded systems8.1 HighN/A1%Nov 5, 2026
CVE-2026-54146: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.8 HighN/A0%Nov 5, 2026
CVE-2026-54145: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.8 HighN/A0%Nov 5, 2026
CVE-2026-54144: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library6.1 MediumN/A0%Nov 5, 2026
CVE-2026-54143: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library9.8 CriticalN/A1%Nov 5, 2026
CVE-2026-54142: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.7 HighN/A1%Nov 5, 2026
CVE-2026-54141: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library9.0 CriticalN/A1%Nov 5, 2026
CVE-2026-54140: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.3 HighN/A1%Nov 5, 2026
CVE-2026-49407: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library7.7 HighN/A0%Nov 5, 2026
CVE-2026-49405: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library6.2 MediumN/A0%Nov 5, 2026
CVE-2026-49393: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library8.4 HighN/A0%Nov 5, 2026
CVE-2026-120499: h5io: h5io before 0.2.6 contains a code injection vulnerability in read_hdf5() that allows attackers to execute arbitrary…7.8 High8.5 High0%Nov 5, 2026
CVE-2026-119083: AWS gluonts: Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted…7.8 High8.4 High0%Nov 5, 2026
CVE-2026-118517: sensiolabs symfony: The Symfony HtmlSanitizer component UrlSanitizer parses URLs differently from browsers, allowing the allowLinkHosts()…4.3 Medium2.3 Low0%Nov 5, 2026
CVE-2026-104867: immich-app immich: Immich is a high-performance self-hosted photo and video management solution4.3 MediumN/A0%Nov 5, 2026
CVE-2026-97847: Red Hat: A flaw was found in the protocol mapper and identity resolution components of Keycloak7.1 HighN/A0%Nov 5, 2026
CVE-2026-97174: Red Hat: A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation of Keycloak6.8 MediumN/A0%Nov 5, 2026
CVE-2026-96453: Red Hat: A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administrators to manage Keycloak servers from…8.0 HighN/A0%Nov 5, 2026
CVE-2026-93998: Red Hat: A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based…7.4 HighN/A0%Nov 5, 2026
976-1000 of 425038
‹›