The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-107359: Silicon Labs WF200 FW: Improper input validation in the beacon handler for WF200 firmware versions 3.17.0 and earlier may result in a…6.5 Medium7.1 High0%Nov 5, 2026
CVE-2026-107130: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated deletion of submission/field files in Gridbox < 2.20.5.0N/A6.9 Medium0%Nov 5, 2026
CVE-2026-107129: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated arbitrary file deletion via path traversal in Gridbox < 2.20.5.05.5 Medium8.3 High0%Nov 5, 2026
CVE-2026-105607: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated stored XSS in the "Recent Comments / Recent Reviews" widget in Gridbox…8.3 High8.6 High0%Nov 5, 2026
CVE-2026-102927: hedgedoc: HedgeDoc is an open source, real-time collaborative markdown notes applicationN/A5.9 Medium0%Nov 5, 2026
CVE-2026-54913: Use of Uninitialized VariableN/A6.9 Medium0%Nov 5, 2026
CVE-2026-54914: Heap-based Buffer OverflowN/A8.3 High0%Nov 5, 2026
CVE-2026-77439: Improper Privilege Management8.8 HighN/A1%Nov 5, 2026
CVE-2026-97371: Stack-based Buffer Overflow5.3 MediumN/A0%Nov 5, 2026
CVE-2026-75614: Improper Validation of Array Index8.1 HighN/A1%Nov 5, 2026
CVE-2026-54146: Cleartext Storage of Sensitive Information in an Environment Variable8.8 HighN/A0%Nov 5, 2026
CVE-2026-54145: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Nov 5, 2026
CVE-2026-54144: Improper Authorization6.1 MediumN/A0%Nov 5, 2026
CVE-2026-54143: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Nov 5, 2026
CVE-2026-54142: Undefined Security Weakness8.7 HighN/A1%Nov 5, 2026
CVE-2026-54141: Improper Control of Generation of Code9.0 CriticalN/A1%Nov 5, 2026
CVE-2026-54140: Undefined Security Weakness8.3 HighN/A1%Nov 5, 2026
CVE-2026-49407: Missing Authentication for Critical Function7.7 HighN/A0%Nov 5, 2026
CVE-2026-49405: Exposure of Sensitive Information to an Unauthorized Actor6.2 MediumN/A0%Nov 5, 2026
CVE-2026-49393: Authentication Bypass Using an Alternate Path or Channel8.4 HighN/A0%Nov 5, 2026
CVE-2026-120499: Improper Neutralization of Directives in Dynamically Evaluated Code7.8 High8.5 High0%Nov 5, 2026
CVE-2026-119083: Improper Limitation of a Pathname to a Restricted Directory7.8 High8.4 High0%Nov 5, 2026
CVE-2026-118517: Incomplete List of Disallowed Inputs4.3 Medium2.3 Low0%Nov 5, 2026
CVE-2026-104867: immich-app immich: Immich is a high-performance self-hosted photo and video management solution4.3 MediumN/A0%Nov 5, 2026
CVE-2026-97847: Improper Authentication7.1 HighN/A0%Nov 5, 2026
1101-1125 of 422263
‹›