The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-104867: immich-app immich: Immich is a high-performance self-hosted photo and video management solution4.3 MediumN/A0%Nov 5, 2026
CVE-2026-97847: Improper Authentication7.1 HighN/A0%Nov 5, 2026
CVE-2026-97174: Improper Input Validation6.8 MediumN/A0%Nov 5, 2026
CVE-2026-96453: Improper Certificate Validation8.0 HighN/A0%Nov 5, 2026
CVE-2026-93998: Improper Verification of Cryptographic Signature7.4 HighN/A0%Nov 5, 2026
CVE-2026-92857: Improper Input Validation8.1 HighN/A0%Nov 5, 2026
CVE-2026-92855: Improper Authentication7.4 HighN/A0%Nov 5, 2026
CVE-2026-120859: Deserialization of Untrusted Data7.8 High8.5 High0%Nov 5, 2026
CVE-2026-82965: Uncontrolled Resource Consumption7.5 HighN/A0%Nov 5, 2026
CVE-2026-76077: Buffer Copy without Checking Size of Input8.1 HighN/A0%Nov 5, 2026
CVE-2026-75615: Out-of-bounds Read5.3 MediumN/A0%Nov 5, 2026
CVE-2026-111253: Red Hat Red Hat Hardened Images: A flaw was found in dnf5daemon-server6.6 MediumN/A0%Nov 5, 2026
CVE-2026-123158: Unexpected Status Code or Return Value8.1 HighN/A1%Nov 5, 2026
CVE-2026-123125: Incomplete List of Disallowed Inputs6.5 Medium6.3 Medium0%Nov 5, 2026
CVE-2026-122330: Divide By Zero5.5 Medium6.8 Medium0%Nov 5, 2026
CVE-2026-122326: Authorization Bypass Through User-Controlled Key5.3 Medium6.9 Medium1%Nov 5, 2026
CVE-2026-121139: Missing Authentication for Critical Function7.8 High7.3 High0%Nov 5, 2026
CVE-2026-119751: Missing Authorization5.3 Medium6.9 Medium0%Nov 5, 2026
CVE-2026-119345: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A7.2 High0%Nov 5, 2026
CVE-2026-115739: Trellix DLP on-prem extensions: Hard-coded Cryptographic Key vulnerability exists in the DLP on-prem extensions version 11.13.1 and earlier allows a…6.5 Medium6.0 Medium0%Nov 5, 2026
CVE-2026-102523: MariaDB server: MariaDB server is a community developed fork of MySQL server8.0 HighN/A1%Nov 5, 2026
Adobe Photoshop: CVE-2020-9709: Security updates available for Adobe Photoshop (APSB20-45)N/AN/AN/ANov 5, 2026
CVE-2019-7907: Undefined Security WeaknessN/AN/AN/ANov 5, 2026
Adobe Illustrator: CVE-2019-16447: Security updates available for Adobe Illustrator (APSB19-36)7.8 HighN/AN/ANov 5, 2026
CVE-2026-102739: francescopace espectre: ESPectre is a Wi-Fi motion sensing platform for ESP327.8 HighN/A0%Nov 5, 2026
1126-1150 of 415884
‹›