The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-124057: TOTOLINK CA300-PoE: A security flaw has been discovered in TOTOLINK CA300-PoE 6.2c.8849.1 Critical8.5 HighN/ANov 7, 2026
CVE-2026-123992: n/a DataEase: A flaw has been found in DataEase up to 2.10.274.3 Medium2.1 LowN/ANov 7, 2026
CVE-2026-123472: eLightUp Meta Box – WordPress Custom Fields Framework: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in eLightUp Meta Box…6.5 MediumN/AN/ANov 7, 2026
CVE-2026-124058: TOTOLINK CA300-PoE: A weakness has been identified in TOTOLINK CA300-PoE 6.2c.8849.1 Critical9.4 CriticalN/ANov 7, 2026
CVE-2026-119522: ThemeGrill User Registration: Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly…5.3 MediumN/AN/ANov 7, 2026
CVE-2026-123461: PluginUs.Net FOX: Missing Authorization vulnerability in PluginUs.Net FOX woocommerce-currency-switcher allows Exploiting Incorrectly…5.3 MediumN/AN/ANov 7, 2026
CVE-2026-120836: eLightUp Meta Box – WordPress Custom Fields Framework: Missing Authorization vulnerability in eLightUp Meta Box – WordPress Custom Fields Framework meta-box allows Exploiting…6.5 MediumN/AN/ANov 7, 2026
CVE-2026-124258: ThemeGrill User Registration: Missing Authorization vulnerability in ThemeGrill User Registration user-registration allows Exploiting Incorrectly…5.3 MediumN/AN/ANov 7, 2026
CVE-2026-123991: n/a DataEase: A vulnerability was detected in DataEase up to 2.10.277.3 High5.5 MediumN/ANov 7, 2026
CVE-2026-123990: n/a DataEase: A security vulnerability has been detected in DataEase up to 2.10.27/3.1.07.3 High5.5 MediumN/ANov 7, 2026
CVE-2026-124318: treeio: Treeio through 2.0 contains an insecure deserialization vulnerability in UpdateRecord.get_format_strings and…7.2 High8.6 HighN/ANov 7, 2026
CVE-2026-124317: libexpat: libexpat through 2.10.0 contains an out-of-bounds read vulnerability in unknown_toUtf8() and unknown_toUtf16() in…4.8 Medium6.3 MediumN/ANov 7, 2026
CVE-2026-124316: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…4.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-124315: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…6.5 Medium7.1 HighN/ANov 7, 2026
CVE-2026-124314: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in…6.5 Medium7.1 HighN/ANov 7, 2026
CVE-2026-124313: frappe erpnext: Frappe ERPNext before 15.121.4 and 16.x before 16.36.0 contains a missing authorization vulnerability in the…4.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-124312: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC through 3.2.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash the…4.7 Medium5.7 MediumN/ANov 7, 2026
CVE-2026-124311: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC through 3.2.1 contains a NULL pointer dereference vulnerability in InterPrediction::xPredInterBlk…5.5 Medium6.8 MediumN/ANov 7, 2026
CVE-2026-124310: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains an out-of-bounds read vulnerability that allows attackers to crash the…6.1 Medium6.9 MediumN/ANov 7, 2026
CVE-2026-124309: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap out-of-bounds read vulnerability in…6.1 Medium6.9 MediumN/ANov 7, 2026
CVE-2026-124308: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability in DecLibRecon::createSubPicRefBufs…5.8 Medium5.8 MediumN/ANov 7, 2026
CVE-2026-124307: fraunhoferhhi vvdec: Fraunhofer HHI VVdeC before 3.2.1 contains a heap use-after-free vulnerability that allows attackers to corrupt memory…5.8 Medium5.8 MediumN/ANov 7, 2026
CVE-2026-123989: ESEngine DeepSeek-Reasonix: A vulnerability was found in ESEngine DeepSeek-Reasonix up to 1.33.06.3 Medium5.3 MediumN/ANov 7, 2026
CVE-2026-99282: Linux: In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: fix use-after-free on lower…N/AN/AN/ANov 7, 2026
CVE-2026-99281: Linux: In the Linux kernel, the following vulnerability has been resolved: tun: Require CAP_NET_ADMIN to attach to an…N/AN/AN/ANov 7, 2026
1-25 of 420977
›