The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-86041: mayswind ezbookkeeping: ezBookkeeping is an open source, self-hosted personal finance applicationN/A5.3 MediumN/ANov 4, 2026
CVE-2026-122028: NST Labs Tech Nstbrowser: A vulnerability has been found in NST Labs Tech Nstbrowser 1.21.04.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-54381: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a misconfigured cloud storage bucket vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-76892: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A8.7 HighN/ANov 4, 2026
CVE-2026-76826: tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A7.5 HighN/ANov 4, 2026
CVE-2026-54380: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/ANov 4, 2026
CVE-2026-76893: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animationsN/A6.9 MediumN/ANov 4, 2026
CVE-2026-54378: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained a broken access control vulnerability that allows any authenticated user…9.6 Critical9.3 CriticalN/ANov 4, 2026
CVE-2026-54377: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit cloud API before 2026-10-30 contained an insecure direct object reference vulnerability that allows…6.5 Medium6.9 MediumN/ANov 4, 2026
CVE-2026-63655: tsparticles, @tsparticles: tsParticles is a TypeScript library for creating highly customizable particle animations7.5 HighN/AN/ANov 4, 2026
CVE-2026-54376: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure custom URI scheme vulnerability that…8.2 High8.2 HighN/ANov 4, 2026
CVE-2026-122020: NST Labs Tech Nstbrowser: A security flaw has been discovered in NST Labs Tech Nstbrowser up to 1.2.14.3 Medium5.3 MediumN/ANov 4, 2026
CVE-2026-102280: sandboxie-plus Sandboxie: Sandboxie-Plus is an open source sandbox-based isolation software for WindowsN/A6.9 MediumN/ANov 4, 2026
CVE-2026-54375: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure session management vulnerability that…8.4 High8.6 HighN/ANov 4, 2026
CVE-2026-54374: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a hardcoded credentials vulnerability that allows…7.5 High8.7 HighN/ANov 4, 2026
CVE-2026-54373: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains a cleartext traffic vulnerability that allows…3.5 Low5.1 MediumN/ANov 4, 2026
CVE-2026-54372: Shenzhen Shine Industrial Co., Ltd. VitaFit: VitaFit Android application (com.vt.vitafit) before 2.8.1.0 contains an insecure TLS/SSL certificate validation…8.8 High8.7 HighN/ANov 4, 2026
CVE-2026-57562: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-57565: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…6.5 MediumN/AN/ANov 4, 2026
CVE-2026-122019: 6amTech 6valley: A vulnerability was identified in 6amTech 6valley 16.07.3 High6.9 MediumN/ANov 4, 2026
CVE-2026-57566: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…9.3 CriticalN/AN/ANov 4, 2026
CVE-2026-122266: AWS: Improper isolation of shared resources in aws-network-policy-agent in Amazon EKS Network Policy Agent before 1.3.7 (VPC…8.7 High6.3 MediumN/ANov 4, 2026
CVE-2026-57567: readest: Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading…8.6 HighN/AN/ANov 4, 2026
CVE-2026-115473: cesanta mongoose: Mongoose is an embedded web server and network library6.5 MediumN/AN/ANov 4, 2026
CVE-2026-55367: h2o: h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/37.5 HighN/AN/ANov 4, 2026
1-25 of 418286
›