The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-107246: WebPros Plesk extension "Site Import": The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing…N/A9.2 CriticalN/ANov 10, 2026
CVE-2026-107245: Versa VOS: Versa has confirmed a buffer overflow vulnerability in the IPsec implementation on VOS, aka Versa FlexVNFN/AN/AN/ANov 10, 2026
CVE-2026-107240: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…7.6 HighN/AN/ANov 10, 2026
CVE-2026-107242: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…N/AN/AN/ANov 10, 2026
CVE-2026-107241: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…7.6 HighN/AN/ANov 10, 2026
CVE-2026-107244: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…7.6 HighN/AN/ANov 10, 2026
CVE-2026-107243: Versa VOS: The Node.js web service on VOS (previously Versa FlexVNF) is used for URL-based Zero Touch Provisioning (ZTP) of the…7.6 HighN/AN/ANov 10, 2026
CVE-2026-125082: sunkaifei FlyCMS: A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a3.5 Low5.1 MediumN/ANov 10, 2026
CVE-2026-124602: GeoVision Inc. GV-Access: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access…6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124601: GeoVision Inc. GV-Access: An API key is hardcoded and retrievable from the GV-Access package6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124603: GeoVision Inc. GV-Cloud: An API key is hardcoded and retrievable from the GV-Cloud application package6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124604: GeoVision Inc. GV-Cloud: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application…6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124600: GeoVision Inc. GV-Face: GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connectionsN/A10.0 CriticalN/ANov 10, 2026
CVE-2026-124599: GeoVision Inc. GV-Face: The RSA cryptographic key material, including a private key and public key, is embedded within the application package6.2 MediumN/AN/ANov 10, 2026
CVE-2026-89119: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-89115: SAP_SE SAP Start Service and SAP Microsoft Management Console: SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection4.4 MediumN/AN/ANov 10, 2026
CVE-2026-89114: SAP_SE SAP NetWeaver AS Java EDM Application: SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-89103: SAP_SE SAP Gateway: SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-76973: SAP_SE SAP NetWeaver and ABAP Platform (SAP Message Server): Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an…7.5 HighN/AN/ANov 10, 2026
CVE-2026-124598: GeoVision Inc. GV-Face: An API key is hardcoded and retrievable from the GV-Face package7.5 HighN/AN/ANov 10, 2026
CVE-2026-76970: SAP_SE SAP NetWeaver and ABAP Platform: Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an…7.5 HighN/AN/ANov 10, 2026
CVE-2026-76966: SAP_SE SAP NetWeaver and ABAP Platform: Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP…8.9 HighN/AN/ANov 10, 2026
CVE-2026-76965: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-125406: ettercap: Ettercap through 0.8.4.1 contains a stack buffer underwrite vulnerability in the telnet dissector in…8.8 High8.7 HighN/ANov 10, 2026
CVE-2026-125405: ettercap: Ettercap through 0.8.4.1 contains an out-of-bounds read vulnerability in Parse_NTLM_Auth() in src/dissectors/ec_http.c…8.1 High7.2 HighN/ANov 10, 2026
1-25 of 427771
›