The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115715: Elastic Elasticsearch: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to denial of service via a…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-115710: Elastic Elasticsearch: Use of Cache Containing Sensitive Information (CWE-524) in Elasticsearch can lead to information disclosure and…4.2 MediumN/AN/ANov 3, 2026
CVE-2026-115298: Elastic Elasticsearch: Incorrect Authorization (CWE-863) in Elasticsearch can lead to information disclosure via Accessing Functionality Not…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-115297: Elastic Packetbeat: NULL Pointer Dereference (CWE-476) in the AMQP protocol parser in Packetbeat can lead to denial of service via…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-115295: Elastic Kibana: Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-115294: Elastic Kibana: Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in the Kibana Fleet feature can lead to…7.3 HighN/AN/ANov 3, 2026
CVE-2026-115293: Elastic Kibana: Insertion of Sensitive Information Into Sent Data (CWE-201) in Kibana Observability onboarding can lead to disclosure…6.5 MediumN/AN/ANov 3, 2026
CVE-2026-115292: Elastic Kibana: Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana Machine Learning can lead to information…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-115290: Elastic Elasticsearch: Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested…7.5 HighN/AN/ANov 3, 2026
CVE-2026-115289: Elastic APM Server: Use of Multiple Resources with Duplicate Identifier (CWE-694) in APM Server can lead to information disclosure via a…4.3 MediumN/AN/ANov 3, 2026
CVE-2026-119495: WebberZone Better Search: Missing Authorization vulnerability in WebberZone Better Search better-search allows Exploiting Incorrectly Configured…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-109594: SonicWall Global Management System (GMS): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…N/AN/AN/ANov 3, 2026
CVE-2026-121603: solanum-ircd solanum: Solanum before commit 2ea1382 contains a buffer overflow vulnerability in ms_kill() that allows malicious linked…6.5 Medium8.5 HighN/ANov 3, 2026
CVE-2026-109593: SonicWall Global Management System (GMS): An unauthenticated attacker with network access to the SonicWall GMS 9.5.2 and earlier versions may be able to read…N/AN/AN/ANov 3, 2026
CVE-2026-28336: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of…9.9 CriticalN/AN/ANov 3, 2026
CVE-2026-28335: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution8.4 HighN/AN/ANov 3, 2026
CVE-2026-28327: SolarWinds Dameware: SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability8.2 HighN/AN/ANov 3, 2026
CVE-2026-103916: Docker Docker Sandboxes: Docker Sandboxes sbx cp does not safely confine host-side paths to a shared workspaceN/A8.4 HighN/ANov 3, 2026
CVE-2026-73328: volmarg personal-management-system: Volmarg Personal Management System through 2.1.0 contains an unrestricted file upload vulnerability that allows…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-65168: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd socket handling code.7.0 HighN/AN/ANov 3, 2026
CVE-2026-65165: NVIDIA Slurm: NVIDIA Slurm contains a vulnerability where a user could deliberately alter the provided nodelist alongside the…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-65140: NVIDIA Slurm: NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that…5.7 MediumN/AN/ANov 3, 2026
CVE-2026-65139: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled SQL injection attack in certain SlurmDBD RPCs that can lead to arbitrary…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-65138: NVIDIA Slurm: NVIDIA Slurm contains an attacker-controlled arbitrary-memory read in the slurmstepd socket API that could be used to…6.3 MediumN/AN/ANov 3, 2026
CVE-2026-65109: NVIDIA Slurm: NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attacker to…4.7 MediumN/AN/ANov 3, 2026
151-175 of 528356
‹›