The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122301: parse-community parse-server: Parse Server before 8.6.114 and 9.0.0 before 9.10.6-alpha.6 returns field values in object create responses to callers…3.1 Low2.3 LowN/ANov 5, 2026
CVE-2026-122189: OpenPPL ppl.nn: A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d56.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122188: DeepGraphLearning KnowledgeGraphEmbedding: A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a6.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122160: myshell-ai AIlice: A security vulnerability has been detected in myshell-ai AIlice up to 0.4.06.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122159: Edge0-AI Audio8_TTS: A weakness has been identified in Edge0-AI Audio8_TTS up to 1d64afcc2da56222b41ddcf53de7b8bc54be1fb66.3 Medium2.1 LowN/ANov 5, 2026
CVE-2025-66368: Samsung Semiconductor: Incorrect handling of SDP payload leads to a Denial of ServiceN/AN/AN/ANov 5, 2026
CVE-2025-66367: Samsung Semiconductor: Improper handling of NAS DLTransport messages may lead to a baseband crash.N/AN/AN/ANov 5, 2026
CVE-2025-66366: Samsung Semiconductor: Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crashN/AN/AN/ANov 5, 2026
CVE-2025-66365: Samsung Semiconductor: Incorrect handling of SIP packets leads to baseband crashesN/AN/AN/ANov 5, 2026
CVE-2026-122158: n/a InvoiceShelf: A security flaw has been discovered in InvoiceShelf up to 2.4.3/3.0.0-alpha.34.7 Medium2.0 LowN/ANov 5, 2026
CVE-2026-122157: Purocean Yank Note: A vulnerability was identified in Purocean Yank Note 3.93.06.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122154: purocean Yank Note: A vulnerability was found in purocean Yank Note 3.93.05.3 Medium5.5 MediumN/ANov 5, 2026
CVE-2025-66364: Samsung Semiconductor: Continuously sending control‑plane messages causes the baseband to crashes.N/AN/AN/ANov 5, 2026
CVE-2026-122151: n/a Presenton: A security vulnerability has been detected in Presenton up to 0.9.11-beta4.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122146: 101arrowz fflate: A weakness has been identified in 101arrowz fflate up to 0.8.37.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-122144: nliautaud pico-content-editor: A security flaw has been discovered in nliautaud pico-content-editor up to 02d5ad6c820c5050c542ab9505819b5e0a0ba1af4.3 Medium2.1 LowN/ANov 5, 2026
CVE-2026-122052: n/a laspy: A vulnerability has been found in laspy up to 2.7.04.3 Medium5.3 MediumN/ANov 5, 2026
CVE-2026-109849: NTT DATA INTELLILINK Corporation Hinemos: Incorrect privilege assignment issue exists in Hinemos6.5 Medium7.1 HighN/ANov 5, 2026
CVE-2026-122051: Edimax BR-6208AC: A flaw has been found in Edimax BR-6208AC 1.3210.0 Critical9.3 CriticalN/ANov 5, 2026
CVE-2026-122050: Campcodes Complete Sales and Inventory System with Credit Management: A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit Management 1.07.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-122049: Campcodes Bitcoin Wallet System: A flaw has been found in Campcodes Bitcoin Wallet System 1.03.7 Low2.9 LowN/ANov 5, 2026
CVE-2026-97702: openedx openedx-platform: Open edX Platform enables the authoring and delivery of online learning at any scale5.3 MediumN/AN/ANov 4, 2026
CVE-2026-86041: mayswind ezbookkeeping: ezBookkeeping is an open source, self-hosted personal finance applicationN/A5.3 MediumN/ANov 4, 2026
CVE-2026-77372: VeraCrypt: VeraCrypt provides disk encryption with strong security based on TrueCryptN/A8.8 HighN/ANov 4, 2026
CVE-2026-76892: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A8.7 HighN/ANov 4, 2026
151-175 of 418988
‹›