The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-109518: Debian, Ubuntu APT: On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic…N/A7.7 HighN/ANov 4, 2026
CVE-2026-106554: FasterXML jackson-dataformat-cbor: One CBOR-parsing issue in jackson-dataformats-binary's CBOR module: an unbounded run of CBOR tags drives quadratic-time…N/AN/AN/ANov 4, 2026
CVE-2026-66736: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/ANov 4, 2026
CVE-2026-39431: n/a: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, one of the API functions available on a management service…N/AN/AN/ANov 4, 2026
CVE-2026-39430: n/a: On HP Poly EagleEye Cube USB 1.3.1-001267 devices, the administrator authentication flow is broken: session management…N/AN/AN/ANov 4, 2026
CVE-2026-122008: oqtane oqtane.framework: Oqtane Framework before 10.3.0 contains a server-side request forgery vulnerability in the UploadFile endpoint of…5.0 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-122007: oqtane oqtane.framework: Oqtane Framework before 10.3.0 contains a broken access control vulnerability in SettingController.cs that allows an…6.5 Medium7.4 HighN/ANov 4, 2026
CVE-2026-122006: rubyonrails Active Storage: The activestorage gem before 8.1.4.1 for Ruby on Rails, when ImageMagick attachment processing occurs, can allow server…9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-121640: WatchGuard AuthPoint Authentication Gateway: An Authentication Bypass by Capture-replay vulnerability in WatchGuard AuthPoint Gateway allows an attacker who has…N/A9.1 CriticalN/ANov 4, 2026
CVE-2026-121639: WatchGuard AuthPoint Authentication Gateway: A Missing Authentication for Critical Function vulnerability in WatchGuard AuthPoint Gateway allows a remote…N/A9.2 CriticalN/ANov 4, 2026
CVE-2026-121638: WatchGuard AuthPoint Authentication Gateway: An Improper Certificate Validation vulnerability in WatchGuard AuthPoint Gateway allows an attacker with an on-path…N/A9.1 CriticalN/ANov 4, 2026
CVE-2026-121637: WatchGuard AuthPoint Authentication Gateway: An improper integrity validation vulnerability in WatchGuard AuthPoint Gateway's LDAP authentication callback allows a…N/A8.9 HighN/ANov 4, 2026
CVE-2026-121632: Cross-site Scripting (XSS)N/AN/AN/ANov 4, 2026
CVE-2026-121009: SQL InjectionN/AN/AN/ANov 4, 2026
CVE-2026-121008: Cross-site Scripting (XSS)N/AN/AN/ANov 4, 2026
CVE-2026-121007: SQL InjectionN/AN/AN/ANov 4, 2026
CVE-2026-120421: Eclipse Foundation Eclipse Mojarra: In Eclipse Mojarra versions 2.2.0 through 4.0.28, 4.1.0 through 4.1.19, and 5.0.0-M1 through 5.0.0-M11, when URL client…6.1 MediumN/AN/ANov 4, 2026
CVE-2026-119776: frrouting: In all prior released versions of FRRouting, the OSPFv3 (for IPv6) implementation does not check that OSPFv3 packets…N/A6.1 MediumN/ANov 4, 2026
CVE-2026-114627: Cross-site Scripting (XSS)N/AN/AN/ANov 4, 2026
CVE-2026-100408: git-for-windows git: Git for Windows is the Windows port of Git4.4 MediumN/AN/ANov 4, 2026
CVE-2026-100407: git-for-windows git: Git for Windows is the Windows port of Git4.4 MediumN/AN/ANov 4, 2026
CVE-2026-121993: wedevs wePOS – Point Of Sale (POS) for WooCommerce & Dokan: wePOS (Point Of Sale for WooCommerce) before 2.0.3 contains a missing authorization vulnerability in the…4.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-119745: Sender: Sender plugin for WordPress before 2.11.3 contains a missing authorization vulnerability that allows any authenticated…4.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-118391: elixir-ecto ecto: Allocation of Resources Without Limits or Throttling vulnerability in elixir-ecto ecto allows an unauthenticated remote…N/A8.9 HighN/ANov 4, 2026
CVE-2026-65555: Uncanny Owl Uncanny Toolkit for LearnDash: Incorrect Privilege Assignment vulnerability in Uncanny Owl Uncanny Toolkit for LearnDash uncanny-learndash-toolkit…9.8 CriticalN/AN/ANov 4, 2026
176-200 of 418286
‹›