The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123205: Heap-based Buffer Overflow6.5 Medium8.3 High0%Nov 5, 2026
CVE-2026-123204: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Nov 5, 2026
CVE-2026-123203: Stack-based Buffer Overflow6.1 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-123202: Stack-based Buffer Overflow7.5 High8.7 High1%Nov 5, 2026
CVE-2026-123201: Server-Side Request Forgery (SSRF)5.3 Medium6.3 Medium0%Nov 5, 2026
CVE-2026-123200: Improper Validation of Array Index7.5 High8.7 High0%Nov 5, 2026
CVE-2026-123199: Buffer Copy without Checking Size of Input5.5 Medium6.8 Medium0%Nov 5, 2026
CVE-2026-123198: Improper Neutralization of Special Elements Used in a Template Engine9.8 Critical9.3 Critical1%Nov 5, 2026
CVE-2026-123197: Files or Directories Accessible to External Parties5.3 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-123196: Weak Password Recovery Mechanism for Forgotten Password8.1 High8.6 High0%Nov 5, 2026
CVE-2026-123135: Use of Hard-coded Credentials6.3 Medium2.1 Low0%Nov 5, 2026
CVE-2026-118494: Insertion of Sensitive Information into Externally-Accessible File or DirectoryN/A8.2 High0%Nov 5, 2026
CVE-2026-116574: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…5.9 MediumN/A0%Nov 5, 2026
CVE-2026-116573: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform6.5 MediumN/A0%Nov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…2.7 LowN/A0%Nov 5, 2026
CVE-2026-115451: tassos.gr: Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension…6.5 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-100365: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/A0%Nov 5, 2026
CVE-2026-100364: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/A0%Nov 5, 2026
CVE-2026-100363: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/A0%Nov 5, 2026
CVE-2026-100362: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A6.9 Medium0%Nov 5, 2026
CVE-2026-100361: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/A0%Nov 5, 2026
CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 High0%Nov 5, 2026
CVE-2026-100359: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/A0%Nov 5, 2026
CVE-2026-100358: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A9.4 Critical0%Nov 5, 2026
CVE-2026-97175: Improper Authentication8.8 HighN/A0%Nov 5, 2026
1076-1100 of 522604
‹›