The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123198: LMFDB: LMFDB before commit 01829bd contains a server-side template injection vulnerability in the render_knowl function that…9.8 Critical9.3 CriticalN/ANov 5, 2026
CVE-2026-123197: wppconnect wppconnect-server: WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers…5.3 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-123196: authorizerdev authorizer: Authorizer before 2.4.2 contains a password reset poisoning vulnerability that allows unauthenticated attackers to…8.1 High8.6 HighN/ANov 5, 2026
CVE-2026-123135: langgenius dify: A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.26.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-118494: jreviews.com JReviews component for Joomla: Joomla Extension - jreviews.com - Secret configs cached in a web-accessible in JReviews 1.0.0-5.12.0, 6.0.0-6.6.9 -…N/A8.2 HighN/ANov 5, 2026
CVE-2026-116574: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…5.9 MediumN/AN/ANov 5, 2026
CVE-2026-116573: signalwire freeswitch: FreeSWITCH is an open-source software telecommunications platform6.5 MediumN/AN/ANov 5, 2026
CVE-2026-116472: Kubernetes, SUSE: A security issue was discovered in ingress-nginx where a user with permission to create an Ingress may be able to cause…2.7 LowN/AN/ANov 5, 2026
CVE-2026-115451: tassos.gr: Joomla Extension - tassos.gr - File deletion through improper access control in Advanced Custom Fields extension…6.5 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-100365: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-100364: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-100363: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application8.8 HighN/AN/ANov 5, 2026
CVE-2026-100362: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A6.9 MediumN/ANov 5, 2026
CVE-2026-100361: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application7.1 HighN/AN/ANov 5, 2026
CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A7.1 HighN/ANov 5, 2026
CVE-2026-100359: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application6.5 MediumN/AN/ANov 5, 2026
CVE-2026-100358: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software applicationN/A9.4 CriticalN/ANov 5, 2026
CVE-2026-97174: Red Hat: A flaw was found in the Client-Initiated Backchannel Authentication (CIBA) implementation of Keycloak6.8 MediumN/AN/ANov 5, 2026
CVE-2026-93998: Red Hat: A flaw was found in the SAML adapter component of Keycloak, which is used to secure applications with SAML-based…7.4 HighN/AN/ANov 5, 2026
CVE-2026-54912: bytecodealliance wasm-micro-runtime: WebAssembly Micro Runtime (WAMR) is a lightweight standalone WebAssembly (Wasm) runtimeN/A8.8 HighN/ANov 5, 2026
CVE-2026-123184: Altium Altium 365: An incorrect authorization vulnerability exists in the Altium 365 Git Service8.1 High7.2 HighN/ANov 5, 2026
CVE-2026-121949: sensiolabs symfony: The Symfony HtmlSanitizer component does not apply the media URL policy to the srcset and imagesrcset attributes,…5.4 Medium2.3 LowN/ANov 5, 2026
CVE-2026-115452: tassos.gr: Joomla Extension - tassos.gr - Privileged stored XSS in Advanced Custom Fields 2.8.2-2.8.15, 3.0.0-3.1.8 and Smile Pack…6.7 Medium7.5 HighN/ANov 5, 2026
CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…6.3 Medium5.8 MediumN/ANov 5, 2026
CVE-2026-112109: Thalesgroup Safenet Authentication Client Service: A local privilege escalation vulnerability in Thales SafeNet Authentication Client (SAC) SACSrv can allow an…7.0 High7.3 HighN/ANov 5, 2026
126-150 of 423114
‹›