The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120596: Ethernut / egnite GmbH Nut/Net TCP/IP Stack: A remotely exploitable denial-of-service vulnerability exists in the TCP options parser of the Nut/Net TCP/IP stack…N/AN/AN/ANov 2, 2026
CVE-2026-65059: Furl versions through 3.15 for Perl allow memory exhaustion via unbounded decompression of HTTP responsesN/AN/AN/ANov 2, 2026
CVE-2026-105769: chainguard-forks kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…9.3 CriticalN/AN/ANov 2, 2026
CVE-2026-88811: SUSE Rancher: Missing filtering in the SUSE Rancher Manager meta proxy could cause passed in rancher credentials to be leaked to…9.1 CriticalN/AN/ANov 2, 2026
CVE-2026-119301: AWS aws-sdk-pandas: Improper neutralization of quoting syntax in SQL identifier construction in the Apache Iceberg write component in AWS…7.9 High5.0 MediumN/ANov 2, 2026
CVE-2026-88810: SUSE Rancher: A privilege escalation issue was discovered in Rancher Manager's role-based access control7.2 HighN/AN/ANov 2, 2026
CVE-2026-77881: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a blind SQL injection vulnerability in an unauthenticated…6.2 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-77880: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77879: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains a SQL injection vulnerability in the loopback API…7.7 High8.5 HighN/ANov 2, 2026
CVE-2026-77877: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains a missing authentication vulnerability that allows…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-77876: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the…9.8 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-16306: INFINITT Healthcare System Manager: Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., LtdN/AN/AN/ANov 2, 2026
CVE-2026-120501: redimp otterwiki: An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows…5.3 Medium6.9 MediumN/ANov 2, 2026
CVE-2026-104080: Control Web Panel: Control Web Panel (CWP) before webpanel_version 1.30 contains an OS command injection vulnerability in the loopback API…8.4 High8.6 HighN/ANov 2, 2026
CVE-2026-99242: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: fix race between fallocate and mmap reads The…N/AN/AN/ANov 2, 2026
CVE-2026-99241: Linux: In the Linux kernel, the following vulnerability has been resolved: ntfs: take invalidate_lock in…N/AN/AN/ANov 2, 2026
CVE-2026-99240: Linux: In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos_commit_quota_goal() for…N/AN/AN/ANov 2, 2026
CVE-2026-99239: Linux: In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: refuse __l2cap_chan_add if chan…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99238: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99237: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99236: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Reject incomplete event filter expressions…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99235: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Save the event file instead of the…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99234: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing: Unregister field variable histograms when…N/AN/AN/ANov 2, 2026
CVE-2026-99233: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when…7.8 HighN/AN/ANov 2, 2026
CVE-2026-99232: Linux: In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the…N/AN/AN/ANov 2, 2026
1-25 of 574114
›