The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-97356: Apache Software Foundation Apache OFBiz: External Control of File Name or Path vulnerability in the ViewFile component of Label Manager in Apache OFBiz 24.09.07…N/AN/AN/ANov 5, 2026
CVE-2026-97355: Apache Software Foundation Apache OFBiz: Use of Hard-coded Password vulnerability in the AdminServer component in Apache OFBiz 24.09.07 on all platforms allows…N/AN/AN/ANov 5, 2026
CVE-2026-92887: Apache Software Foundation Apache OFBiz: Incorrect default value in the REST API framework's .rest.xml definition parser (ModelApiReader) in Apache OFBiz…N/AN/AN/ANov 5, 2026
CVE-2026-85627: Apache Software Foundation Apache OFBiz: Improper Neutralization of Special Elements Used in a Template Engine ('Server-Side Template Injection') in Apache…N/AN/AN/ANov 5, 2026
CVE-2026-84728: Apache Software Foundation Apache OFBiz: Incorrect Authorization in Apache OFBiz 24.09 before 24.09.08 on all platforms, when documented multitenancy is…N/AN/AN/ANov 5, 2026
CVE-2026-84183: Incorrect AuthorizationN/AN/AN/ANov 5, 2026
CVE-2026-83542: Code InjectionN/AN/AN/ANov 5, 2026
CVE-2026-83538: Exposure of Sensitive InformationN/AN/AN/ANov 5, 2026
CVE-2026-82960: Code InjectionN/AN/AN/ANov 5, 2026
CVE-2026-82916: External Control of File Name or PathN/AN/AN/ANov 5, 2026
CVE-2026-82912: Improper Neutralization of Special Elements used in an Expression Language StatementN/AN/AN/ANov 5, 2026
CVE-2026-82910: Improper Neutralization of Special Elements Used in a Template EngineN/AN/AN/ANov 5, 2026
CVE-2026-82907: Authentication Bypass by Capture-replayN/AN/AN/ANov 5, 2026
CVE-2026-82904: Allocation of Resources Without Limits or ThrottlingN/AN/AN/ANov 5, 2026
CVE-2026-82902: Missing AuthorizationN/AN/AN/ANov 5, 2026
CVE-2026-76563: Fileorbis Informatics Services Trade Inc. Fileorbis: Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics…6.1 MediumN/AN/ANov 5, 2026
CVE-2026-123059: Eclipse Foundation Eclipse BaSyx Helm Charts: In Eclipse BaSyx Helm Charts version 2.2.0 of the `aas-basyx-v2-full` chart, deployments with the bundled Keycloak…7.5 HighN/AN/ANov 5, 2026
CVE-2026-123028: A vulnerability was identified in itsourcecode Online Book Store 1.07.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-123024: agentscope-ai AgentScope: A vulnerability has been found in agentscope-ai AgentScope up to 2.0.117.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-123023: agentscope-ai AgentScope: A flaw has been found in agentscope-ai AgentScope up to 2.0.87.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-123022: agentscope-ai AgentScope: A vulnerability was detected in agentscope-ai AgentScope up to 2.0.117.3 High5.5 MediumN/ANov 5, 2026
CVE-2026-117691: Red Hat: A flaw was found in the SAML HTTP-Redirect binding implementation of Keycloak9.1 CriticalN/AN/ANov 5, 2026
CVE-2026-114277: Apache Software Foundation Apache OFBiz: Authentication bypass by Assumed-Immutable data vulnerability in Apache OFBizN/AN/AN/ANov 5, 2026
CVE-2026-114272: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the content viewing component in Apache OFBiz 24.09 before 24.09.08…N/AN/AN/ANov 5, 2026
CVE-2026-114271: Apache Software Foundation Apache OFBiz: Authorization Bypass Through User-Controlled Key in the shopping list services in Apache OFBiz 24.09 before 24.09.08 on…N/AN/AN/ANov 5, 2026
1-25 of 415969
›