The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-124501: Tidelift moto: A weakness has been identified in Tidelift moto up to 5.2.47.3 High5.5 MediumN/ANov 9, 2026
CVE-2026-124500: Fengoffice Feng Office: A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.26.3 Medium2.1 LowN/ANov 9, 2026
CVE-2026-124499: Fengoffice Feng Office: A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.24.7 Medium2.0 LowN/ANov 9, 2026
CVE-2026-124498: Convene Azeus Convene Board Management Portal: A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p723.5 Low2.0 LowN/ANov 8, 2026
CVE-2026-96146: IBM SevOne Network Performance Management: IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a remote attacker to cause a denial of…7.5 HighN/AN/ANov 8, 2026
CVE-2026-95867: IBM SevOne Network Performance Management: IBM SevOne Network Performance Management 7.0.0 through 8.2.2 could allow a local attacker to execute arbitrary code…6.7 MediumN/AN/ANov 8, 2026
CVE-2026-17427: IBM: IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-17426: IBM OPENBMC: IBM Power Systems Firmware FW1060.00 through FW1060.81 could allow a remote attacker to cause a denial of service due…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-16697: IBM: IBM Power Systems Firmware FW1060.00 through FW1060.81, OP940.00 through OP940.A2, OP910.00 through OP910.95, and…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-16682: IBM: IBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW1060.00 through FW1060.81,…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-118904: IBM webMethods Integration Server: IBM webMethods Integration Server 12.1 could allow a remote authenticated attacker to bypass security restrictions due…8.1 HighN/AN/ANov 8, 2026
CVE-2026-9764: IBM Bob Shell: IBM Bob 1.0.4 through 2.0.1 could allow a remote attacker to inject arbitrary code on the system, due to the improper…8.8 HighN/AN/ANov 8, 2026
CVE-2026-97677: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.2 An authenticated flow author could write attacker-controlled file content into…8.1 HighN/AN/ANov 8, 2026
CVE-2026-93879: IBM Hibernate Validator: Hibernate Validator could allow a remote attacker to cause a denial of service due to uncontrolled resource consumption…7.5 HighN/AN/ANov 8, 2026
CVE-2026-93005: IBM Process Mining: IBM Process Mining 2.0.0 through 2.2.1 could allow an authenticated attacker to cause a denial of service through…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-8860: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-8642: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that…4.3 MediumN/AN/ANov 8, 2026
CVE-2026-8640: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 does not set the SameSite attribute…3.5 LowN/AN/ANov 8, 2026
CVE-2026-8639: IBM: IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation8.8 HighN/AN/ANov 8, 2026
CVE-2026-84237: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to…3.1 LowN/AN/ANov 8, 2026
CVE-2026-84229: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote attacker to bypass security restrictions due to improper…6.5 MediumN/AN/ANov 8, 2026
CVE-2026-84228: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to obtain sensitive information due to…3.1 LowN/AN/ANov 8, 2026
CVE-2026-84030: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote attacker to execute arbitrary SQL commands due to improper…5.6 MediumN/AN/ANov 8, 2026
CVE-2026-82830: IBM Guardium Data Protection: IBM Guardium Data Protection 12.2.4 could allow a remote authenticated attacker to execute arbitrary commands due to…6.7 MediumN/AN/ANov 8, 2026
CVE-2026-81542: IBM DataStage on Cloud Pak for Data: IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to delete arbitrary files due…6.4 MediumN/AN/ANov 8, 2026
126-150 of 418829
‹›