The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120572: Mozilla Firefox: Incorrect boundary conditions in the Layout: Block and Inline component8.8 HighN/AN/ANov 3, 2026
CVE-2026-119742: Nagios Enterprises, LLC Nagios XI: Nagios XI before 2026R2 contains an OS command injection vulnerability in the MIB upload feature where the…7.2 High8.6 HighN/ANov 3, 2026
CVE-2026-119179: MongoDB Node.js Driver: A flaw in the connection management layer of the MongoDB Node.js driver can leave a pooled network connection in the…7.0 High8.3 HighN/ANov 3, 2026
CVE-2026-99270: Linux: In the Linux kernel, the following vulnerability has been resolved: tcp: Fix potential UAF in reqsk_timer_handler()N/AN/AN/ANov 3, 2026
CVE-2026-76124: BuddyBoss BuddyBoss App: The BuddyBoss App plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,…8.8 HighN/AN/ANov 3, 2026
CVE-2026-65160: NVIDIA: NVIDIA nvJPEG contains a vulnerability where an attacker could cause a divide-by-zero5.5 MediumN/AN/ANov 3, 2026
CVE-2026-108060: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108059: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108058: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108057: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108056: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108055: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108054: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108053: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108052: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108051: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108050: AM System ALO Suite: A stored Cross-Site Scripting (XSS) vulnerability in Alosuite that affects the delivery note functionalityN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108049: AM System ALO Suite: Clickjacking vulnerability in the Alosuite web applicationN/A5.1 MediumN/ANov 3, 2026
CVE-2026-108048: AM System ALO Suite: Vulnerability due to a lack of request limits in Alosuite’s password recovery functionalityN/A6.9 MediumN/ANov 3, 2026
CVE-2026-108047: AM System ALO Suite: Inadequate authorization vulnerability in Alosuite’s user invitation functionalityN/A8.6 HighN/ANov 3, 2026
CVE-2026-108046: AM System ALO Suite: Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-121458: CoreBunch Instatic: Instatic before 0.0.21 contains a missing authorization vulnerability in its AI/MCP content read tools that allows…6.5 Medium7.1 HighN/ANov 3, 2026
CVE-2026-99269: Linux: In the Linux kernel, the following vulnerability has been resolved: sched_ext: Wait for SCX_OPSS_DISPATCHING before…N/AN/AN/ANov 3, 2026
CVE-2026-99268: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring: wake ring pollers for local task_work…N/AN/AN/ANov 3, 2026
CVE-2026-99267: Linux: In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: make stale entries time out after…N/AN/AN/ANov 3, 2026
151-175 of 528356
‹›