CVEs: Metasploit module, page 3
373 CVEs with a public Metasploit Framework module, sorted by threat level then EPSS. Showing 241-360. Use search to combine filters.
CRITICAL 9.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-39205CVE-2024-39205: An issue in pyload-ng v0.5.0b3.dev85 running under python3.11 or below allows attackers to…
Unknown · · EPSS 16.54% · Threat 64CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2024-51978CVE-2024-51978: An unauthenticated attacker who knows the target device's serial number, can generate the …
Unknown · · EPSS 15.83% · Threat 64HIGH 8.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-34197Apache ActiveMQ Improper Input Validation Vulnerability
Apache · ActiveMQ · EPSS 15.49% · Threat 64CRITICAL 9.5
Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred
CVE-2026-48558SimpleHelp Authentication Bypass Vulnerability
SimpleHelp · SimpleHelp · EPSS 5.72% · Threat 64CRITICAL 9.5
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-88772Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Citrix · NetScaler · EPSS 5.30% · Threat 64CRITICAL 9.5
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-88771Citrix NetScaler Improper Input Validation Vulnerability
Citrix · NetScaler · EPSS 5.11% · Threat 64MEDIUM 6.1
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2023-4220CVE-2023-4220: Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/big…
chamilo · chamilo lms · EPSS 76.08% · Threat 63HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-34511CVE-2025-34511: Sitecore PowerShell Extensions, an add-on to Sitecore Experience Manager (XM) and Experien…
sitecore · experience commerce · EPSS 30.45% · Threat 63CRITICAL 9.3
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-42208BerriAI LiteLLM SQL Injection Vulnerability
BerriAI · LiteLLM · EPSS 5.77% · Threat 63CRITICAL 9.3
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-3055Citrix NetScaler Out-of-Bounds Read Vulnerability
Citrix · NetScaler · EPSS 4.04% · Threat 63HIGH 8.4
Metasploit moduleATT&CK inferred
CVE-2025-11700CVE-2025-11700: N-central versions < 2025.4 are vulnerable to multiple XML External Entities injection lea…
n-able · n-central · EPSS 31.68% · Threat 62HIGH 8.7
Metasploit moduleATT&CK inferred
CVE-2025-57790CVE-2025-57790: A security vulnerability has been identified that allows remote attackers to perform unaut…
commvault · commvault · EPSS 28.98% · Threat 62HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2024-35250Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability
Microsoft · Windows · EPSS 25.22% · Threat 62CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-32778CVE-2025-32778: Web-Check is an all-in-one OSINT tool for analyzing any website. A command injection vulne…
Unknown · · EPSS 19.55% · Threat 62CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2025-6793CVE-2025-6793: Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion an…
marvell · qconvergeconsole · EPSS 17.49% · Threat 62CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2025-8489CVE-2025-8489: The King Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elemen…
Unknown · · EPSS 9.61% · Threat 62CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-52806CVE-2026-52806: Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated…
Unknown · · EPSS 7.93% · Threat 62CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-41679CVE-2026-41679: Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a …
paperclip · paperclipai · EPSS 7.36% · Threat 62CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2025-24865CVE-2025-24865: The administrative web interface of mySCADA myPRO Manager can be accessed without authen…
myscada · mypro · EPSS 7.25% · Threat 62HIGH 7.5
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-2011CVE-2025-2011: The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL I…
Unknown · · EPSS 45.75% · Threat 61HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-34510CVE-2025-34510: Sitecore Experience Manager (XM), Experience Platform (XP), and Experience Commerce (XC) v…
sitecore · experience commerce · EPSS 24.83% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-29058CVE-2026-29058: AVideo is a video-sharing Platform software. Prior to version 7.0, an unauthenticated atta…
wwbn · avideo-encoder · EPSS 6.92% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2024-55964CVE-2024-55964: An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL inst…
appsmith · appsmith · EPSS 6.75% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-93674CVE-2026-93674: IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote attacker to execute arbitrary c…
langflow · langflow · EPSS 6.24% · Threat 61CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2024-12029CVE-2024-12029: A remote code execution vulnerability exists in invoke-ai/invokeai versions 5.3.1 through …
Unknown · · EPSS 5.98% · Threat 61CRITICAL 9.8
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-29053CVE-2026-29053: Ghost is a Node.js content management system. From version 0.7.2 to 6.19.0, specifically c…
ghost · ghost · EPSS 5.10% · Threat 61CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2026-19681CVE-2026-19681: An authenticated command injection vulnerability exists in Security Center related to file…
tenable · security center · EPSS 9.94% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-27960CVE-2026-27960: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and ob…
citeum · opencti · EPSS 4.68% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2025-62521CVE-2025-62521: ChurchCRM is an open-source church management system. Prior to version 5.21.0, a pre-authe…
churchcrm · churchcrm · EPSS 4.51% · Threat 60CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-19295CVE-2026-19295: IBM Langflow OSS 1.0.0 through 1.11.1 allows an authenticated attacker to execute arbitrar…
langflow · langflow · EPSS 3.00% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-27966CVE-2026-27966: Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to ve…
langflow · langflow · EPSS 2.81% · Threat 60CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-77647CVE-2026-77647: SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as e…
Unknown · · EPSS 2.29% · Threat 60CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-10134CVE-2026-10134: IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to …
langflow · langflow · EPSS 1.60% · Threat 60CRITICAL 10
Metasploit moduleATT&CK inferred
CVE-2026-45087CVE-2026-45087: Dalfox is a powerful open-source XSS scanner and utility focused on automation. Prior to 2…
Unknown · · EPSS 1.39% · Threat 60CRITICAL 9.9
Metasploit moduleATT&CK inferred
CVE-2026-7873CVE-2026-7873: IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary …
langflow · langflow · EPSS 1.07% · Threat 60HIGH 8.5
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-49619CVE-2025-49619: Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Promp…
Unknown · · EPSS 20.42% · Threat 59CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28517CVE-2026-28517: openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerab…
opendcim · opendcim · EPSS 9.40% · Threat 59CRITICAL 9.3
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-24479CVE-2026-24479: HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP t…
hustoj · hustoj · EPSS 8.13% · Threat 59CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-2611CVE-2025-2611: The ICTBroadcast application unsafely passes session cookie data to shell processing, allo…
Unknown · · EPSS 8.10% · Threat 59CRITICAL 9.8
Metasploit moduleATT&CK inferred
CVE-2026-28501CVE-2026-28501: WWBN AVideo is an open source video platform. Prior to version 24.0, an unauthenticated SQ…
wwbn · avideo · EPSS 1.45% · Threat 59HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2025-2264CVE-2025-2264: A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". A…
santesoft · sante pacs server · EPSS 35.38% · Threat 58CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-27175CVE-2026-27175: MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated OS command injectio…
mjdm · majordomo · EPSS 7.84% · Threat 58CRITICAL 9.1
Metasploit moduleATT&CK inferred
CVE-2024-51092CVE-2024-51092: LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command …
librenms · librenms · EPSS 7.18% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-27174CVE-2026-27174: MajorDoMo (aka Major Domestic Module) allows unauthenticated remote code execution via the…
mjdm · majordomo · EPSS 5.70% · Threat 58CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2025-24293CVE-2025-24293: # Active Storage allowed transformation methods potentially unsafe Active Storage attem…
Unknown · · EPSS 5.66% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-71243CVE-2025-71243: The 'Saisies pour formulaire' (Saisies) plugin for SPIP versions 5.4.0 through 5.11.0 cont…
spip · saisies · EPSS 5.59% · Threat 58CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-34415CVE-2026-34415: Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vul…
Unknown · · EPSS 4.43% · Threat 58CRITICAL 9.4
Metasploit moduleATT&CK inferred
CVE-2026-19626CVE-2026-19626: A remote code execution vulnerability exists in Tenable Security Center's report generatio…
tenable · security center · EPSS 1.85% · Threat 58MEDIUM 6.1
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2023-41425CVE-2023-41425: Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote atta…
wondercms · wondercms · EPSS 54.31% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleATT&CK inferred
CVE-2026-83549SonicWall SMA1000 Appliances OS Command Injection Vulnerability
SonicWall · SMA1000 Appliances · EPSS 9.89% · Threat 57HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0995Linux Kernel Out-of-Bounds Write Vulnerability
Linux · Kernel · EPSS 8.86% · Threat 57CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2025-22896CVE-2025-22896: mySCADA myPRO Manager stores credentials in cleartext, which could allow an attacker to …
myscada · mypro · EPSS 3.57% · Threat 57CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-27760CVE-2026-27760: OpenCATS prior to commit 3002a29 contains a PHP code injection vulnerability in the instal…
Unknown · · EPSS 3.43% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-66039CVE-2025-66039: FreePBX Endpoint Manager is a module for managing telephony endpoints in FreePBX systems. …
sangoma · freepbx · EPSS 3.28% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-34089CVE-2025-34089: An unauthenticated remote code execution vulnerability exists in Remote for Mac, a macOS r…
Unknown · · EPSS 2.35% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28515CVE-2026-28515: openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerab…
opendcim · opendcim · EPSS 2.12% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-32985CVE-2026-32985: Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file …
apereo · xerte online toolkits · EPSS 2.00% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-28516CVE-2026-28516: openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in…
opendcim · opendcim · EPSS 1.58% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-34433CVE-2025-34433: AVideo versions 14.3.1 prior to 20.1 contain an unauthenticated remote code execution vuln…
Unknown · · EPSS 1.48% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2025-3096CVE-2025-3096: Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability…
Unknown · · EPSS 1.46% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-88773CVE-2026-88773: Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerabi…
citrix · netscaler application delivery controller · EPSS 1.30% · Threat 57CRITICAL 9.3
Metasploit moduleATT&CK inferred
CVE-2026-27180CVE-2026-27180: MajorDoMo (aka Major Domestic Module) is vulnerable to unauthenticated remote code executi…
mjdm · majordomo · EPSS 1.26% · Threat 57MEDIUM 5
Metasploit modulePublic PoCATT&CK inferred
CVE-2007-6750CVE-2007-6750: The Apache HTTP Server 1.x and 2.x allows remote attackers to cause a denial of service (d…
apache · http server · EPSS 70.53% · Threat 56MEDIUM 5.3
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-27218CVE-2025-27218: Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow …
Unknown · · EPSS 65.00% · Threat 56MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-9316CVE-2025-9316: N-central < 2025.4 can generate sessionIDs for unauthenticated users This issue affec…
Unknown · · EPSS 37.39% · Threat 56MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-57791CVE-2025-57791: A security vulnerability has been identified that allows remote attackers to inject or man…
commvault · commvault · EPSS 37.01% · Threat 56HIGH 7
Metasploit moduleATT&CK inferred
CVE-2025-5306CVE-2025-5306: Improper Neutralization of Special Elements in the Netflow directory field may allow OS co…
artica · pandora fms · EPSS 35.69% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCCTID-mapped
CVE-2023-0386Linux Kernel Improper Ownership Management Vulnerability
Linux · Kernel · EPSS 7.88% · Threat 56HIGH 8.7
Metasploit moduleATT&CK inferred
CVE-2026-56274CVE-2026-56274: Flowise before 3.1.2 contains multiple OS command injection vulnerabilities in the Custom …
flowiseai · flowise · EPSS 7.52% · Threat 56HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2024-55555CVE-2024-55555: Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route w…
Unknown · · EPSS 6.62% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2022-0492Linux Kernel Improper Authentication Vulnerability
Linux · Kernel · EPSS 5.53% · Threat 56HIGH 7.8
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-5287Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability
Red Hat · Automatic Bug Reporting Tool · EPSS 5.00% · Threat 56CRITICAL 9
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-75604CVE-2026-75604: Next.js is a React framework for building full-stack web applications. From 13.4.0 until 1…
Unknown · · EPSS 2.10% · Threat 56CRITICAL 9.2
Metasploit moduleATT&CK inferred
CVE-2026-41264CVE-2026-41264: Flowise is a drag & drop user interface to build a customized large language model flow. P…
flowiseai · flowise · EPSS 1.44% · Threat 56HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-48990CVE-2024-48990: Qualys discovered that needrestart, before version 3.8, allows local attackers to execute …
needrestart project · needrestart · EPSS 21.27% · Threat 55HIGH 8.1
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-50286CVE-2025-50286: A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated ad…
getgrav · grav · EPSS 13.64% · Threat 55HIGH 7.4
Exploited in the wild · CISA KEVMetasploit moduleExploit-DBATT&CK inferred
CVE-2015-3246Red Hat Libuser Race Condition Vulnerability
Red Hat · Libuser · EPSS 8.50% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-30004CVE-2025-30004: Xorcom CompletePBX is vulnerable to command injection in the administrator Task Scheduler …
xorcom · completepbx · EPSS 4.31% · Threat 55HIGH 7.8
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-31431Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability
Linux · Kernel · EPSS 3.44% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2024-48594CVE-2024-48594: File Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to ex…
fast5 · prison management system · EPSS 3.37% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2022-2297CVE-2022-2297: A vulnerability, which was classified as critical, was found in SourceCodester Clinics Pat…
oretnom23 · clinic\'s patient management system · EPSS 3.37% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-34413CVE-2026-34413: Xerte Online Toolkits versions 3.15 and earlier contain a missing authentication vulnerabi…
Unknown · · EPSS 3.07% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-27636CVE-2026-27636: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior t…
freescout · freescout · EPSS 2.36% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2025-69516CVE-2025-69516: A Server-Side Template Injection (SSTI) vulnerability in the /reporting/templates/preview/…
amidaware · tactical rmm · EPSS 2.31% · Threat 55HIGH 8.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-43503CVE-2026-43503: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: propagat…
linux · linux kernel · EPSS 1.99% · Threat 55HIGH 8.8
Metasploit moduleATT&CK inferred
CVE-2026-18729CVE-2026-18729: IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execu…
langflow · langflow · EPSS 1.78% · Threat 55CRITICAL 9
Metasploit moduleATT&CK inferred
CVE-2025-62368CVE-2025-62368: Taiga is an open source project management platform. In versions 6.8.3 and earlier, a remo…
Unknown · · EPSS 1.55% · Threat 55CRITICAL 9
Metasploit moduleATT&CK inferred
CVE-2025-12548CVE-2025-12548: A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticate…
Unknown · · EPSS 1.30% · Threat 55HIGH 8.7
Metasploit moduleATT&CK inferred
CVE-2025-66294CVE-2025-66294: Grav is a file-based Web platform. Prior to 1.8.0-beta.27, a Server-Side Template Injectio…
getgrav · grav · EPSS 2.82% · Threat 54HIGH 8.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-32019CVE-2024-32019: Netdata is an open source observability tool. In affected versions the `ndsudo` tool shipp…
Unknown · · EPSS 1.17% · Threat 54HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2024-48456CVE-2024-48456: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 16.95% · Threat 53HIGH 7.7
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-46987CVE-2024-46987: Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A…
tuzitio · camaleon cms · EPSS 14.56% · Threat 53HIGH 7.8
Metasploit moduleATT&CK inferred
CVE-2024-30085CVE-2024-30085: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
microsoft · windows 10 1809 · EPSS 14.32% · Threat 53HIGH 8.6
Metasploit moduleATT&CK inferred
CVE-2025-66301CVE-2025-66301: Grav is a file-based Web platform. Prior to 1.8.0-beta.27, due to improper authorization c…
getgrav · grav · EPSS 1.34% · Threat 53HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-60787CVE-2025-60787: MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration para…
motioneye project · motioneye · EPSS 18.46% · Threat 52HIGH 8.2
Metasploit moduleATT&CK inferred
CVE-2025-25205CVE-2025-25205: Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 a…
audiobookshelf · audiobookshelf · EPSS 4.75% · Threat 52HIGH 8.3
Metasploit moduleATT&CK inferred
CVE-2025-30005CVE-2025-30005: Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module,…
xorcom · completepbx · EPSS 1.88% · Threat 52HIGH 8.1
Metasploit moduleATT&CK inferred
CVE-2026-28289CVE-2026-28289: FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. A patch…
freescout · freescout · EPSS 2.72% · Threat 51HIGH 8.1
Metasploit moduleATT&CK inferred
CVE-2026-22594CVE-2026-22594: Ghost is a Node.js content management system. In versions 5.105.0 through 5.130.5 and 6.0.…
ghost · ghost · EPSS 1.31% · Threat 51MEDIUM 5.3
Metasploit modulePublic PoCATT&CK inferred
CVE-2024-51977CVE-2024-51977: An unauthenticated attacker who can access either the HTTP service (TCP port 80), the HTTP…
Unknown · · EPSS 46.63% · Threat 50HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2025-5946CVE-2025-5946: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')…
centreon · centreon web · EPSS 13.51% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-43500CVE-2026-43500: In the Linux kernel, the following vulnerability has been resolved: rxrpc: Also unshare D…
linux · linux kernel · EPSS 2.62% · Threat 50HIGH 7.8
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2026-46300CVE-2026-46300: In the Linux kernel, the following vulnerability has been resolved: net: skbuff: preserve…
linux · linux kernel · EPSS 2.43% · Threat 50HIGH 7.2
Metasploit moduleExploit-DBATT&CK inferred
CVE-2026-3576CVE-2026-3576: The Planyo Online Reservation System plugin for WordPress is vulnerable to Server-Side Req…
Unknown · · EPSS 8.81% · Threat 49HIGH 7.7
Metasploit moduleATT&CK inferred
CVE-2026-42249CVE-2026-42249: Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism …
ollama · ollama · EPSS 0.99% · Threat 49HIGH 7.7
Metasploit moduleATT&CK inferred
CVE-2026-42248CVE-2026-42248: Ollama for Windows does not perform integrity or authenticity verification of downloaded u…
ollama · ollama · EPSS 0.72% · Threat 49HIGH 7.8
Metasploit modulePublic PoCATT&CK inferred
CVE-2026-3888CVE-2026-3888: Local privilege escalation in snapd on Linux allows local attackers to get root privilege …
canonical · ubuntu linux · EPSS 0.47% · Threat 49HIGH 7.2
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2025-14558CVE-2025-14558: The rtsol(8) and rtsold(8) programs do not validate the domain search list options provide…
freebsd · freebsd · EPSS 6.38% · Threat 48HIGH 7.3
Metasploit moduleATT&CK inferred
CVE-2025-67888CVE-2025-67888: An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209. User input passed vi…
Unknown · · EPSS 3.60% · Threat 48HIGH 7.5
Metasploit moduleATT&CK inferred
CVE-2024-48457CVE-2024-48457: An issue in Netis Wifi6 Router NX10 2.0.1.3643 and 2.0.1.3582 and Netis Wifi 11AC Router N…
Unknown · · EPSS 3.08% · Threat 48MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2025-57788CVE-2025-57788: A vulnerability in a known login mechanism allows unauthenticated attackers to execute API…
commvault · commvault · EPSS 7.76% · Threat 47HIGH 7.1
Metasploit moduleATT&CK inferred
CVE-2026-34414CVE-2026-34414: Xerte Online Toolkits versions 3.15 and earlier contain a relative path traversal vulnerab…
Unknown · · EPSS 3.63% · Threat 47HIGH 7.3
Metasploit moduleATT&CK inferred
CVE-2024-53326CVE-2024-53326: LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.Auto…
Unknown · · EPSS 0.49% · Threat 47MEDIUM 5.9
Exploited in the wild · CISA KEVMetasploit modulePublic PoCATT&CK inferred
CVE-2026-60137WordPress Core SQL Injection Vulnerability
WordPress · Core · EPSS 5.32% · Threat 46HIGH 7
Metasploit moduleATT&CK inferred
CVE-2025-4653CVE-2025-4653: Improper Neutralization of Special Elements in the backup name field may allow OS command …
Unknown · · EPSS 3.35% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2025-68109CVE-2025-68109: ChurchCRM is an open-source church management system. In versions prior to 6.5.3, the Data…
churchcrm · churchcrm · EPSS 1.53% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2026-39980CVE-2026-39980: OpenCTI is an open source platform for managing cyber threat intelligence knowledge and ob…
citeum · opencti · EPSS 1.31% · Threat 46HIGH 7.2
Metasploit moduleATT&CK inferred
CVE-2026-0265CVE-2026-0265: An authentication bypass vulnerability in Palo Alto Networks PAN-OS® software enables an u…
paloaltonetworks · pan-os · EPSS 1.05% · Threat 46MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2026-6826CVE-2026-6826: Concrete CMS 9.5.0 and below is vulnerable to unauthenticated file usage disclosure via m…
concretecms · concrete cms · EPSS 1.28% · Threat 45MEDIUM 6.9
Metasploit moduleATT&CK inferred
CVE-2026-41459