The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126495: emqx MQTTX: MQTTX desktop through 1.13.3 contains a stored cross-site scripting vulnerability that allows attackers to inject…6.1 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126188: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…3.7 LowN/AN/ANov 11, 2026
Cisco ISE: CVE-2026-20183: Cisco Identity Services Engine Authorization Bypass Vulnerabilities4.3 MediumN/AN/ANov 10, 2026
Fortinet FortiManager: CVE-2026-126261: FGFM elevation before registration password is verified9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-126187: react: React is a JavaScript library for building user interfacesN/A9.5 CriticalN/ANov 10, 2026
CVE-2026-123084: Red Hat: An **expression language injection** has been found in the HeaderContentGuard.permit function in publication.py of the…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-0480: AMD: Missing Authentication for Critical Function in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…N/A6.0 MediumN/ANov 10, 2026
CVE-2026-0454: AMD: An out-of-bounds write in the AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-0435: AMD: Operation on a resource after expiration or release in the AMD Secure Encrypted Virtualization (SEV) firmware could…N/A6.0 MediumN/ANov 10, 2026
CVE-2026-0003: AMD: Use of a per-part static key in the ASP Bootloader could allow an attacker to downgrade the Secure Encrypted…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-48504: AMD: Operation on a resource after expiration or release in the Secure Encrypted Virtualization (SEV) firmware could allow a…N/A6.8 MediumN/ANov 10, 2026
CVE-2025-29941: AMD: Incorrect usage of seeds in pseudo-random number generator in the Secure Encrypted Virtualization (SEV) firmware could…N/A6.0 MediumN/ANov 10, 2026
CVE-2025-0008: AMD: Insufficient verification of data authenticity may allow a local attacker to bypass Secure Debug Unlock (SDU),…N/A8.4 HighN/ANov 10, 2026
CVE-2024-36309: AMD: Missing Lock Bit Protection in the Northbridge IO (NBIO) could allow a privileged attacker to use an intentionally…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-96437: Not Failing SecurelyN/A8.2 HighN/ANov 10, 2026
CVE-2026-92558: Improper Encoding or Escaping of OutputN/A6.3 MediumN/ANov 10, 2026
CVE-2026-92545: Use of Cache Containing Sensitive InformationN/A8.7 HighN/ANov 10, 2026
CVE-2026-92443: Use of Cache Containing Sensitive InformationN/A8.2 HighN/ANov 10, 2026
CVE-2026-92442: Use of Cache Containing Sensitive InformationN/A8.3 HighN/ANov 10, 2026
CVE-2026-92441: Improper Neutralization of CRLF SequencesN/A7.8 HighN/ANov 10, 2026
CVE-2026-92439: Improper AuthenticationN/A7.8 HighN/ANov 10, 2026
CVE-2026-91000: Missing Authentication for Critical FunctionN/A8.4 HighN/ANov 10, 2026
CVE-2026-90834: NULL Pointer Dereference5.5 MediumN/AN/ANov 10, 2026
CVE-2026-90833: Out-of-bounds Write7.8 HighN/AN/ANov 10, 2026
CVE-2026-90832: Out-of-bounds Read4.3 MediumN/AN/ANov 10, 2026
1151-1175 of 422975