The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-121751: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121750: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121749: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.3 Low4.6 MediumN/ANov 4, 2026
CVE-2026-121748: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.6 Low1.8 LowN/ANov 4, 2026
CVE-2026-121747: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121746: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-121745: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions2.5 Low2.0 LowN/ANov 4, 2026
CVE-2026-115473: cesanta mongoose: Mongoose is an embedded web server and network library6.5 MediumN/AN/ANov 4, 2026
CVE-2026-103002: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning8.8 HighN/AN/ANov 4, 2026
CVE-2026-102895: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-102894: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.1 CriticalN/AN/ANov 4, 2026
CVE-2026-102280: sandboxie-plus Sandboxie: Sandboxie-Plus is an open source sandbox-based isolation software for WindowsN/A6.9 MediumN/ANov 4, 2026
CVE-2026-97373: jgraph drawio: draw.io is a configurable diagramming and whiteboarding application5.8 MediumN/AN/ANov 4, 2026
CVE-2026-82418: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to…9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-19319: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information…5.3 MediumN/AN/ANov 4, 2026
CVE-2026-18142: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-17493: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due…7.5 HighN/AN/ANov 4, 2026
CVE-2026-16725: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-14252: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…6.2 MediumN/AN/ANov 4, 2026
CVE-2026-13292: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.8 HighN/AN/ANov 4, 2026
CVE-2026-13289: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13284: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…7.1 HighN/AN/ANov 4, 2026
CVE-2026-13271: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…8.1 HighN/AN/ANov 4, 2026
CVE-2026-12550: IBM MQ: IBM MQ 9.2.0.0 through 9.2.0.44 LTS, 9.3.0.0 through 9.3.0.42 LTS, 9.4.0.0 through 9.4.0.26 LTS, 9.4.0.0 through…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-12538: IBM MQ Appliance: IBM MQ 9.4.0.0 to 9.4.0.26, 9.4.1.0 to 9.4.5.3, and 10.0.0.1 to 10.0.0.5 could allow an authenticated attacker to…5.4 MediumN/AN/ANov 4, 2026
126-150 of 418286
‹›