The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-62344: open-wanderer wanderer: Wanderer is a self-hosted trail database for saving and sharing adventures7.5 HighN/A0%Nov 6, 2026
CVE-2026-123976: Teunis van Beelen EDFbrowser: EDFbrowser before 2.16 contains an out-of-bounds write vulnerability in check_edf_file() that allows attackers to…5.5 Medium6.8 Medium0%Nov 6, 2026
CVE-2026-123973: SharePoint Products: SharePoint Products CopyMove before 2026-11-06 allows traversal5.0 MediumN/A0%Nov 6, 2026
CVE-2026-123876: Red Hat: A flaw was found in the default seccomp profile used by Podman via containers-common4.4 MediumN/A0%Nov 6, 2026
CVE-2026-123824: sensiolabs symfony: The Symfony Config component XmlUtils::parse() enables DTD validation before rejecting documents that carry a doctype,…6.3 Medium2.3 Low0%Nov 6, 2026
CVE-2026-123748: chenyme grok2api: A security flaw has been discovered in chenyme grok2api up to 3.1.64.3 Medium5.3 Medium0%Nov 6, 2026
CVE-2026-119758: Monogramm erpnext_ocr: ERPNext OCR app for Frappe/ERPNext through 1.1.1 contains a missing authorization and path traversal vulnerability that…6.5 Medium7.1 High0%Nov 6, 2026
CVE-2026-118670: OHIF Viewers: OHIF Viewers is a zero-footprint DICOM viewer with shared extension packages8.8 HighN/A0%Nov 6, 2026
CVE-2026-102650: nuxt content: Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components7.5 HighN/A0%Nov 6, 2026
CVE-2026-102359: yuzutech kroki: Kroki creates diagrams from textual descriptions7.5 HighN/A0%Nov 6, 2026
CVE-2026-102356: yuzutech kroki: Kroki creates diagrams from textual descriptions5.0 MediumN/A0%Nov 6, 2026
CVE-2026-85744: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox5.4 MediumN/A0%Nov 6, 2026
CVE-2026-85743: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox8.2 HighN/A0%Nov 6, 2026
CVE-2026-62856: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox application7.7 HighN/A0%Nov 6, 2026
CVE-2026-62855: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox4.4 MediumN/A0%Nov 6, 2026
CVE-2026-62854: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox7.6 HighN/A0%Nov 6, 2026
CVE-2026-62852: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox6.5 MediumN/A0%Nov 6, 2026
CVE-2026-62851: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox4.3 MediumN/A0%Nov 6, 2026
CVE-2026-62850: freescout-help-desk freescout: FreeScout is a self-hosted help desk and shared mailbox5.3 MediumN/A0%Nov 6, 2026
CVE-2026-49951: infiniflow ragflow: RAGFlow before 0.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to force…6.3 Medium5.3 Medium0%Nov 6, 2026
CVE-2026-123962: Debian FreedomBox: In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting…8.4 HighN/A0%Nov 6, 2026
CVE-2026-123859: Snowflake: When identifier escaping is disabled through a non-default configuration, the write_pandas() data-loading functionality…8.1 HighN/A0%Nov 6, 2026
CVE-2026-123858: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 project files could be automatically uploaded to a deployment server from untrusted…4.4 MediumN/A0%Nov 6, 2026
CVE-2026-123857: JetBrains PhpStorm: In JetBrains PhpStorm before 2026.3 xXE was possible in untrusted projects via PHPMD ruleset autodetection4.3 MediumN/A0%Nov 6, 2026
CVE-2026-123856: JetBrains Toolbox App: In JetBrains Toolbox App before 3.6.1 nTLM hash disclosure was possible via SVG tool icons from a Remote Development…6.5 MediumN/A0%Nov 6, 2026
1176-1200 of 427771
‹›