The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123810: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.3 MediumN/AN/ANov 9, 2026
CVE-2026-63496: electrovir augment-vir: augment-vir is a collection of helper functions7.8 HighN/AN/ANov 9, 2026
CVE-2026-123809: dynatrace-oss dynatrace-mcp: Dynatrace MCP Server is an MCP server for Dynatrace Observability4.2 MediumN/AN/ANov 9, 2026
CVE-2026-63497: titraio titra: titra is an open source time tracking projectN/A5.3 MediumN/ANov 9, 2026
CVE-2026-124994: Turboderp-org ExLlamaV3: A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.36.3 Medium5.3 MediumN/ANov 9, 2026
CVE-2026-123808: nuxt ui: Nuxt UI is an intuitive Vue UI library powered by Reka UI and Tailwind CSS5.3 MediumN/AN/ANov 9, 2026
CVE-2026-123807: SignalK, @signalk: Signal K Server is a server application that runs on a central hub in a boat9.8 CriticalN/AN/ANov 9, 2026
CVE-2026-122056: Red Hat: A flaw was found in OpenSCAP5.9 MediumN/AN/ANov 9, 2026
CVE-2026-124992: n/a nushell: A vulnerability was identified in nushell up to 0.116.13.3 Low4.8 MediumN/ANov 9, 2026
CVE-2026-119759: trailbaseio trailbase: TrailBase 0.28.2 before 0.35.10 contains an insecure direct object reference vulnerability that allows authenticated…8.1 High8.6 HighN/ANov 9, 2026
CVE-2026-113971: Apple iOS and iPadOS: This issue was addressed by restricting options offered on a locked deviceN/AN/AN/ANov 9, 2026
CVE-2026-113970: Apple: A use-after-free issue was addressed with improved memory managementN/AN/AN/ANov 9, 2026
CVE-2026-113969: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113968: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113965: Apple: This issue was addressed with improved checksN/AN/AN/ANov 9, 2026
CVE-2026-113964: Apple: A logic issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113963: Apple: An authorization issue was addressed with improved state managementN/AN/AN/ANov 9, 2026
CVE-2026-113961: Apple: An authorization issue was addressed with improved validationN/AN/AN/ANov 9, 2026
CVE-2026-113960: Apple: This issue was addressed by removing the vulnerable codeN/AN/AN/ANov 9, 2026
CVE-2026-56712: replicate cog: Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the…8.5 High6.3 MediumN/ANov 9, 2026
CVE-2026-123806: theupdateframework python-tuf: python-tuf is a Python reference implementation of The Update Framework (TUF)4.0 MediumN/AN/ANov 9, 2026
CVE-2026-87857: Temporal Technologies, Inc. Temporal Server: Temporal Server does not bind a workflow-history pagination token to the namespace and workflow named in the request…N/A5.3 MediumN/ANov 9, 2026
CVE-2026-125270: FFmpeg: FFmpeg through 9.0.2 contains a heap out-of-bounds read vulnerability in v4l2_buffer_swframe_to_buf() in…5.3 Medium5.8 MediumN/ANov 9, 2026
CVE-2026-125269: FFmpeg: FFmpeg through 9.0.2 contains a double free vulnerability in libavcodec/cbs_sei.c where cbs_sei_delete_message() leaves…7.0 High7.3 HighN/ANov 9, 2026
CVE-2026-125268: FFmpeg: FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in the CineForm HD decoder that allows…3.3 Low4.8 MediumN/ANov 9, 2026
201-225 of 427771
‹›