The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-77691: Zohocorp ManageEngine Key Manager Plus: ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when…8.1 HighN/AN/ANov 3, 2026
CVE-2026-120333: TYPO3 Extension "Frontend User Registration": The actions linked in the emails of the extension (e.gN/A8.8 HighN/ANov 3, 2026
CVE-2026-120332: TYPO3 Extension "Mail": The HTML content of mails and tracked URLs are rendered unescaped in the backend moduleN/A5.1 MediumN/ANov 3, 2026
CVE-2026-120331: TYPO3 Extension "Mail": Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the…N/A5.3 MediumN/ANov 3, 2026
CVE-2026-120330: TYPO3 Extension "Mail": Backend actions and ajax routes of the mail module do not check whether the backend user has access to the page of the…N/A7.1 HighN/ANov 3, 2026
CVE-2026-120329: TYPO3 Extension "Mail": Saving the configuration of the mail backend module writes submitted settings to the page TSconfig without restricting…N/A5.3 MediumN/ANov 3, 2026
CVE-2026-120328: TYPO3 Extension "Mail": The click tracking middleware does not validate the authentication code of a recipient if the code is omittedN/A6.9 MediumN/ANov 3, 2026
CVE-2026-120327: TYPO3 Extension "Mail": The click tracking middleware accepts an arbitrary target URL and redirects to itN/A5.3 MediumN/ANov 3, 2026
CVE-2026-119843: Red Hat, GStreamer project: A flaw was found in GStreamer's gst-plugins-good package6.5 MediumN/AN/ANov 3, 2026
CVE-2026-119724: Apache Software Foundation Apache JClouds: ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion')…N/AN/AN/ANov 3, 2026
CVE-2026-119641: Apache Software Foundation Apache Oozie: ** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache OozieN/AN/AN/ANov 3, 2026
CVE-2026-92610: Eclipse Foundation Eclipse Semantic Modeling Framework (ESMF): In esmf-sdk-py-aspect-model-loader versions 2.1.2 to 2.2.1, the Aspect Model loader resolves cross-file model…N/AN/AN/ANov 3, 2026
CVE-2026-91075: Unknown Eupago Gateway For Woocommerce: The Eupago Gateway For Woocommerce WordPress plugin from 4.5.0 through 4.7.5 does not verify the authenticity of…5.3 MediumN/AN/ANov 3, 2026
CVE-2026-121024: AxxonSoft AxxonNet: Incorrect Authorization (CWE-863) in the Health Monitoring service in AxxonSoft AxxonNet before 3.28.0 on Linux allows…5.4 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-121023: AxxonSoft AxxonNet ARP Agent: Insertion of Sensitive Information into Log File (CWE-532) in the ARP Agent component in AxxonSoft AxxonNet before…5.5 Medium6.8 MediumN/ANov 3, 2026
CVE-2026-121022: AxxonSoft Axxon One: Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and Linux allows a…8.1 High9.2 CriticalN/ANov 3, 2026
CVE-2026-121021: AxxonSoft Axxon One: Plaintext Storage of a Password (CWE-256) in the SecurityManager shared configuration in AxxonSoft Axxon One before…5.5 Medium6.8 MediumN/ANov 3, 2026
CVE-2026-121020: AxxonSoft Axxon One: Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) in the security configuration API in AxxonSoft…4.3 Medium5.3 MediumN/ANov 3, 2026
CVE-2026-118448: Bitdefender pybddisasm: A use of uninitialized memory vulnerability in the pybddisasm Python bindings affects nd_to_textN/A6.9 MediumN/ANov 3, 2026
CVE-2026-118447: Bitdefender pybddisasm: A use of uninitialized memory vulnerability in the pybddisasm Python bindings may disclose process memory when…N/A4.8 MediumN/ANov 3, 2026
CVE-2026-118446: Bitdefender pybddisasm: A use-after-free vulnerability in the pybddisasm Python bindings affects array-valued members of INSTRUX objects,…N/A6.9 MediumN/ANov 3, 2026
CVE-2026-118445: Bitdefender pybddisasm: A use-after-free vulnerability in the pybddisasm Python bindings affects structure-valued members of INSTRUX objectsN/A6.9 MediumN/ANov 3, 2026
CVE-2026-118444: Bitdefender pybddisasm: Out-of-bounds read vulnerabilities in the pybddisasm Python bindings may disclose adjacent process memory during…N/A4.8 MediumN/ANov 3, 2026
CVE-2026-115231: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager lets a user-mode, memory-protected module…N/A8.5 HighN/ANov 3, 2026
CVE-2026-113421: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, ThreadX Modules does not revoke a module's trace-buffer-full…N/A7.3 HighN/ANov 3, 2026
176-200 of 528356
‹›