The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-119085: AWS virtual-engineering-workbench: Improper neutralization of special elements used in a template engine in the publishing component of Amazon Virtual…8.8 High9.4 CriticalN/ANov 2, 2026
CVE-2026-120630: CrewAI: CrewAI contains an SSRF vulnerability caused by its SSRF guard and HTTP client, which both miss malicious content in…N/AN/AN/ANov 2, 2026
CVE-2024-12139: WSO2: The error handling implementation fails to properly sanitize or validate user-supplied input within URL parameters…4.3 MediumN/AN/ANov 2, 2026
CVE-2026-120627: Private Internet Access Firefox extension: The Private Internet Access Extension for Firefox contains an unguarded onAuthRequired authentication handler, leading…N/AN/AN/ANov 2, 2026
CVE-2026-88811: SUSE Rancher: Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to…9.1 CriticalN/AN/ANov 2, 2026
CVE-2026-88810: SUSE Rancher: A privilege escalation issue was discovered in Rancher Manager's role-based access control7.2 HighN/AN/ANov 2, 2026
CVE-2026-65059: Improper Handling of Highly Compressed DataN/AN/AN/ANov 2, 2026
CVE-2026-120596: Ethernut / egnite GmbH Nut/Net TCP/IP Stack: A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack…N/AN/AN/ANov 2, 2026
CVE-2026-119301: AWS aws-sdk-pandas: Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS…7.9 High5.0 MediumN/ANov 2, 2026
CVE-2026-106807: n/a: A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling pathN/AN/AN/ANov 2, 2026
CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handlingN/AN/AN/ANov 2, 2026
CVE-2026-106804: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_qos_npn moduleN/AN/AN/ANov 2, 2026
CVE-2026-106803: n/a: A stack-based buffer overflow exists in Kamailio v6.1.3 and v6.1.4 in the ims_registrar_pcscf moduleN/AN/AN/ANov 2, 2026
CVE-2026-105769: chainguard-forks kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…9.3 CriticalN/AN/ANov 2, 2026
CVE-2026-94290: SUSE Rancher: SUSE Rancher Fleet clusters reference a kubeconfig secret that the controller uses to install and manage a Fleet agent…9.1 CriticalN/AN/ANov 2, 2026
CVE-2026-77880: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77879: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API…7.7 High8.5 HighN/ANov 2, 2026
CVE-2026-77876: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the…9.8 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-2102: Wren Security wrensec-commons: wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding6.1 MediumN/AN/ANov 2, 2026
CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., LtdN/AN/AN/ANov 2, 2026
CVE-2026-120501: redimp otterwiki: An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows…5.3 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-115654: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the Module Manager's thread-control services do not check that…N/A6.9 MediumN/ANov 2, 2026
CVE-2026-115653: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX versions 6.0.1 through 6.5.2.202603, the PendSV handler of the Cortex-M module ports saves a…N/A7.0 HighN/ANov 2, 2026
CVE-2026-114408: Eclipse Foundation Eclipse ThreadX: In Eclipse ThreadX NetX Duo versions 6.4.5.202504 through 6.5.2.202603a, built with IPv6 path MTU discovery, the ICMPv6…N/A8.7 HighN/ANov 2, 2026
CVE-2026-109142: NLnet Labs Krill: When a CA's parent lives on the same Krill server: instead of building and verifying a signed CMS message, it runs the…8.4 HighN/AN/ANov 2, 2026
1-25 of 574114
›