The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-122235: janhq jan: Jan from 0.8.5 before 0.8.8 contains a workspace guard bypass vulnerability in the agent-tools gate.rs that allows…4.7 Medium5.7 MediumN/ANov 4, 2026
CVE-2026-122234: benjamine jsondiffpatch: jsondiffpatch before 0.7.7 contains a cross-site scripting vulnerability that allows attackers to inject markup by…4.7 Medium2.3 LowN/ANov 4, 2026
CVE-2026-122233: php frankenphp: FrankenPHP before 1.13.4 contains an information disclosure vulnerability in worker mode that fails to clear last HTTP…3.7 Low6.3 MediumN/ANov 4, 2026
CVE-2026-16725: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-19319: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information…5.3 MediumN/AN/ANov 4, 2026
CVE-2026-82418: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to…9.8 CriticalN/AN/ANov 4, 2026
CVE-2026-17493: IBM Watson Speech Services Cartridge: IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due…7.5 HighN/AN/ANov 4, 2026
CVE-2026-122014: NPC-Worldwide npcpy: A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.276.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-105702: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-105991: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…3.5 LowN/AN/ANov 4, 2026
CVE-2026-108536: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…4.6 MediumN/AN/ANov 4, 2026
CVE-2026-108588: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…5.4 MediumN/AN/ANov 4, 2026
CVE-2026-108767: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct HTTP response…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-108838: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a local attacker to cause a denial of service due to…3.3 LowN/AN/ANov 4, 2026
CVE-2026-108910: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to obtain sensitive…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-110281: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 improperly validates TLS certificate validation, which could allow an…5.9 MediumN/AN/ANov 4, 2026
CVE-2026-110282: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to bypass security…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-110283: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to cause a denial of service…4.3 MediumN/AN/ANov 4, 2026
CVE-2026-116376: IBM Db2 Genius Hub: IBM Db2 Genius Hub 1.1.2, 1.1.3, 1.1.4, 1.1.5 could allow a remote authenticated attacker to conduct a phishing attack…3.4 LowN/AN/ANov 4, 2026
CVE-2026-115762: jgraph drawio: draw.io is a configurable diagramming and whiteboarding application6.1 MediumN/AN/ANov 4, 2026
CVE-2026-97373: jgraph drawio: draw.io is a configurable diagramming and whiteboarding application5.8 MediumN/AN/ANov 4, 2026
CVE-2026-104203: traccar: Traccar is an open source GPS tracking system7.5 HighN/AN/ANov 4, 2026
CVE-2026-122013: Comfast CF-WR632AX: A vulnerability was detected in Comfast CF-WR632AX 2.6.0.110.0 Critical10.0 CriticalN/ANov 4, 2026
CVE-2026-115758: sumatrapdfreader sumatrapdf: SumatraPDF is a multi-format reader for WindowsN/A8.2 HighN/ANov 4, 2026
CVE-2026-102664: sysown proxysql: ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL7.1 HighN/AN/ANov 4, 2026
1-25 of 418286
›