The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-123787: nexmoe VidBee: A weakness has been identified in nexmoe VidBee up to 1.3.13/2.0.24.3 Medium5.3 MediumN/ANov 6, 2026
CVE-2026-71863: freedomofpress securedrop: SecureDrop is an open-source whistleblower submission system that media organizations can use to securely accept…2.6 LowN/AN/ANov 6, 2026
CVE-2026-102610: evalstate fast-agent: fast-agent is a framework for building, running, and evaluating AI agents with Model Context Protocol support6.4 MediumN/AN/ANov 6, 2026
CVE-2026-124078: TooTallNate plist.js: plist.js (npm package 'plist') before 5.0.1 contains an uncontrolled resource consumption vulnerability in the binary…7.5 High8.7 HighN/ANov 6, 2026
CVE-2026-102657: esm-dev esm.sh: esm.sh is a no-build content delivery network (CDN) for web development7.5 HighN/AN/ANov 6, 2026
CVE-2026-102344: kunchenguid lavish-axi: Lavish is the new editor for your HTML artifacts8.1 HighN/AN/ANov 6, 2026
CVE-2026-102530: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLabN/A9.4 CriticalN/ANov 6, 2026
CVE-2025-55002: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLab5.5 MediumN/AN/ANov 6, 2026
CVE-2026-86044: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLab9.6 CriticalN/AN/ANov 6, 2026
CVE-2025-54991: jupyterlab jupyterlab-desktop: JupyterLab Desktop is the cross-platform desktop application for JupyterLab5.5 MediumN/AN/ANov 6, 2026
CVE-2026-85737: Velocidex velociraptor: Velociraptor is a tool for collecting host-based state information using Velociraptor Query Language (VQL) queries6.5 MediumN/AN/ANov 6, 2026
CVE-2026-63439: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-63438: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-63440: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codes5.9 MediumN/AN/ANov 6, 2026
CVE-2026-63441: Bubka 2FAuth: 2FAuth is a web app to manage Two-Factor Authentication (2FA) accounts and generate their security codesN/A4.9 MediumN/ANov 6, 2026
CVE-2026-73860: checkpoint-restore criu: CRIU is a checkpoint and restore tool for LinuxN/A5.4 MediumN/ANov 6, 2026
CVE-2026-65960: cilium tetragon: Tetragon is an eBPF-based security observability and runtime enforcement project8.8 HighN/AN/ANov 6, 2026
CVE-2026-63664: dbeaver cloudbeaver: CloudBeaver is a cloud database manager6.5 MediumN/AN/ANov 6, 2026
CVE-2026-63663: dbeaver cloudbeaver: CloudBeaver is a cloud database manager6.5 MediumN/AN/ANov 6, 2026
CVE-2026-58490: TracecatHQ tracecat: Tracecat is an open-source security automation platform for teams and AI agents9.8 CriticalN/AN/ANov 6, 2026
CVE-2026-55649: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data6.3 MediumN/AN/ANov 6, 2026
CVE-2026-55449: dbeaver cloudbeaver: CloudBeaver is a cloud database managerN/A5.3 MediumN/ANov 6, 2026
CVE-2026-46429: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data5.5 MediumN/AN/ANov 6, 2026
CVE-2026-33050: geonode: GeoNode is a geospatial content management system, a platform for the management and publication of geospatial data8.8 HighN/AN/ANov 6, 2026
CVE-2026-124040: civetweb: CivetWeb through 1.16, when built with USE_HTTP2 and enable_http2 on, contains a use-after-free vulnerability in…8.1 High9.2 CriticalN/ANov 6, 2026
1-25 of 425038
›