The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-102280: sandboxie-plus Sandboxie: Sandboxie-Plus is an open source sandbox-based isolation software for WindowsN/A6.9 MediumN/ANov 4, 2026
CVE-2026-54375: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that…8.4 High8.6 HighN/ANov 4, 2026
CVE-2026-54374: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-54373: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows…3.5 Low5.1 MediumN/ANov 4, 2026
CVE-2026-54372: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation…8.8 High8.7 HighN/ANov 4, 2026
CVE-2026-57562: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-57565: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-122019: 6amTech 6valley: A vulnerability was identified in 6amTech 6valley 16.07.3 High6.9 MediumN/ANov 4, 2026
CVE-2026-57566: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…9.3 CriticalN/AN/ANov 4, 2026
CVE-2026-122266: AWS: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC…8.7 High6.3 MediumN/ANov 4, 2026
CVE-2026-57567: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…8.6 HighN/AN/ANov 4, 2026
CVE-2026-115473: cesanta mongoose: Mongoose is an embedded web server and network library6.5 MediumN/AN/ANov 4, 2026
CVE-2026-55367: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/37.5 HighN/AN/ANov 4, 2026
CVE-2026-55368: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/38.1 HighN/AN/ANov 4, 2026
CVE-2026-103002: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning8.8 HighN/AN/ANov 4, 2026
CVE-2026-121746: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-58128: Alan Health Alan: Health Insurance: Alan: Health Insurance for Android (com.alanmobile) 1.450.0 contains a path traversal vulnerability that allows a…6.2 Medium6.9 MediumN/ANov 4, 2026
CVE-2026-121749: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.3 Low4.6 MediumN/ANov 4, 2026
CVE-2026-121747: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions5.5 Medium6.7 MediumN/ANov 4, 2026
CVE-2026-122016: yangzongzhuan RuoYi-Vue: A vulnerability was determined in yangzongzhuan RuoYi-Vue up to 3.9.26.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-121748: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.6 Low1.8 LowN/ANov 4, 2026
CVE-2026-121750: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-121745: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions2.5 Low2.0 LowN/ANov 4, 2026
CVE-2026-121751: nvm-sh nvm: Node Version Manager (nvm) is a POSIX-compliant shell function for managing multiple node.js versions3.1 Low2.1 LowN/ANov 4, 2026
CVE-2026-102894: gpustack: GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning9.1 CriticalN/AN/ANov 4, 2026
1-25 of 418286
›