The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-0324: OPSWAT MetaDefender Endpoint Security SDK: An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto…N/A5.9 MediumN/ANov 11, 2026
CVE-2026-0323: Palo Alto Networks Checkov by Prisma Cloud: A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…N/A1.1 LowN/ANov 11, 2026
CVE-2026-91892: Inadequate Encryption Strength3.7 LowN/AN/ANov 11, 2026
CVE-2026-91891: Insertion of Sensitive Information into Log File7.5 HighN/AN/ANov 11, 2026
CVE-2026-91880: Improper Certificate Validation8.9 HighN/AN/ANov 11, 2026
CVE-2026-91878: XML Injection (aka Blind XPath Injection)7.6 HighN/AN/ANov 11, 2026
CVE-2026-91877: Improper Neutralization of Special Elements in Data Query Logic7.6 HighN/AN/ANov 11, 2026
CVE-2026-91876: Improper Restriction of XML External Entity Reference5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91875: Improper Certificate Validation8.7 HighN/AN/ANov 11, 2026
CVE-2026-91874: Improper Certificate Validation8.7 HighN/AN/ANov 11, 2026
CVE-2026-91873: Improper Certificate Validation8.7 HighN/AN/ANov 11, 2026
CVE-2026-91150: Allocation of Resources Without Limits or Throttling7.5 HighN/AN/ANov 11, 2026
CVE-2026-76080: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams3.7 LowN/AN/ANov 11, 2026
CVE-2026-76079: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams7.2 HighN/AN/ANov 11, 2026
CVE-2026-76078: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams3.1 LowN/AN/ANov 11, 2026
CVE-2026-65967: getfider fider: Fider is a feedback portal for feature requests and suggestions7.1 HighN/AN/ANov 11, 2026
CVE-2026-65843: ForbesLindesay sync-rpc: sync-rpc runs asynchronous commands synchronously by putting them in a separate procesN/A8.7 HighN/ANov 11, 2026
CVE-2026-65840: getfider fider: Fider is a feedback portal for feature requests and suggestions9.6 CriticalN/AN/ANov 11, 2026
CVE-2026-65833: senapati484 iopress: iopress is a native HTTP server for Node.js with platform-specific async I/ON/A6.9 MediumN/ANov 11, 2026
CVE-2026-64861: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams4.3 MediumN/AN/ANov 11, 2026
CVE-2026-63505: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams4.9 MediumN/AN/ANov 11, 2026
CVE-2026-61637: Icinga icingaweb2: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface3.5 LowN/AN/ANov 11, 2026
CVE-2026-58505: maplibre geojson-vt: geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable…7.5 HighN/AN/ANov 11, 2026
CVE-2026-57500: opencloud-eu reva: REVA is an interoperability platform6.3 MediumN/AN/ANov 11, 2026
CVE-2026-126781: webmin: Webmin through 2.670 contains a users file injection vulnerability in acl/cert_issue.cgi that allows authenticated…7.5 High7.7 HighN/ANov 11, 2026
1076-1100 of 561186