The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122327: Arthi-chaud Meelo: Meelo through 3.13.1 contains a missing authorization vulnerability that allows authenticated non-admin users to modify…4.3 Medium5.3 MediumN/ANov 5, 2026
CVE-2026-122326: Chevereto: Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json…5.3 Medium6.9 MediumN/ANov 5, 2026
CVE-2026-122325: fossasia eventyay-exhibition: fossasia eventyay-exhibition through commit f68888e contains an authorization bypass vulnerability in the exhibitor…3.1 Low2.3 LowN/ANov 5, 2026
CVE-2026-122324: oss-apps SplitPro: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other…3.1 Low2.3 LowN/ANov 5, 2026
CVE-2026-122317: oss-apps SplitPro: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to retrieve any…4.3 Medium5.3 MediumN/ANov 5, 2026
CVE-2026-115738: Trellix DLP on-prem extensions: SQL injection vulnerability in DLP on-prem extensions version 11.13.1 and earlier allows a remote authenticated…N/A7.1 HighN/ANov 5, 2026
CVE-2026-119744: Cendio ThinLinc: Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that…8.8 High7.7 HighN/ANov 5, 2026
CVE-2026-97356: Apache Software Foundation Apache OFBiz: External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07…N/AN/AN/ANov 5, 2026
CVE-2026-97355: Apache Software Foundation Apache OFBiz: Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-92887: Apache Software Foundation Apache OFBiz: Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-85627: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache…N/AN/AN/ANov 5, 2026
CVE-2026-83538: Missing AuthorizationN/AN/AN/ANov 5, 2026
CVE-2026-123059: Eclipse Foundation Eclipse BaSyx Helm Charts: In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak…7.5 HighN/AN/ANov 5, 2026
CVE-2026-123028: itsourcecode Online Book Store: A vulnerability was identified in itsourcecode Online Book Store 1.07.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-123024: agentscope-ai AgentScope: A vulnerability has been found in agentscope-ai AgentScope up to 2.0.117.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-114277: Apache Software Foundation Apache OFBiz: Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBizN/AN/AN/ANov 5, 2026
CVE-2026-114272: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08…N/AN/AN/ANov 5, 2026
CVE-2026-114271: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on…N/AN/AN/ANov 5, 2026
CVE-2026-114235: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-114233: Apache Software Foundation Apache OFBiz: Incorrect Privilege Assignment in the Order Manager in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an…N/AN/AN/ANov 5, 2026
CVE-2026-114229: Apache Software Foundation Apache OFBiz: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in the Catalog image viewer in…N/AN/AN/ANov 5, 2026
CVE-2026-109928: Apache Software Foundation Apache OFBiz: Incorrect Implementation of Authentication Algorithm in the password-reset and login JWT validation in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-109856: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') to Financial Account services in Apache OFBiz 24.09 before 24.09.08 on all platforms…N/AN/AN/ANov 5, 2026
CVE-2026-109837: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in Order Returns in Apache OFBiz 24.09 before 24.09.08 on all…N/AN/AN/ANov 5, 2026
CVE-2026-109129: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the Order Manager component in Apache OFBiz 24.09.07 on all…N/AN/AN/ANov 5, 2026
201-225 of 423114
‹›