The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123200: Improper Validation of Array Index7.5 High8.7 High0%Nov 5, 2026
CVE-2026-123199: Buffer Copy without Checking Size of Input5.5 Medium6.8 Medium0%Nov 5, 2026
CVE-2026-123198: Improper Neutralization of Special Elements Used in a Template Engine9.8 Critical9.3 Critical1%Nov 5, 2026
CVE-2026-123197: Files or Directories Accessible to External Parties5.3 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-123196: Weak Password Recovery Mechanism for Forgotten Password8.1 High8.6 High0%Nov 5, 2026
CVE-2026-123135: Use of Hard-coded Credentials6.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-118494: Insertion of Sensitive Information into Externally-Accessible File or DirectoryN/A8.2 High0%Nov 5, 2026
CVE-2026-116574: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…5.9 MediumN/A0%Nov 5, 2026
CVE-2026-116573: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform6.5 MediumN/A0%Nov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…2.7 LowN/A0%Nov 5, 2026
CVE-2026-115451: tassos.gr: Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension…6.5 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-100365: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/A0%Nov 5, 2026
CVE-2026-100364: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/A0%Nov 5, 2026
CVE-2026-100363: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/A0%Nov 5, 2026
CVE-2026-100362: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A6.9 Medium0%Nov 5, 2026
CVE-2026-100361: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/A0%Nov 5, 2026
CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 High0%Nov 5, 2026
CVE-2026-100359: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/A0%Nov 5, 2026
CVE-2026-100358: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A9.4 Critical0%Nov 5, 2026
CVE-2026-97175: Improper Authentication8.8 HighN/A0%Nov 5, 2026
CVE-2026-54912: Out-of-bounds WriteN/A8.8 High0%Nov 5, 2026
CVE-2026-123184: Incorrect Authorization8.1 High7.2 High0%Nov 5, 2026
CVE-2026-121949: Incomplete List of Disallowed Inputs5.4 Medium2.3 Low0%Nov 5, 2026
CVE-2026-115452: tassos.gr: Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack…6.7 Medium7.5 High0%Nov 5, 2026
CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…6.3 Medium5.8 Medium0%Nov 5, 2026
1076-1100 of 421657
‹›