The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-119102: Progress Software Telerik UI for Blazor: In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-118976: Progress Software Telerik UI for Blazor: In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration…7.5 HighN/AN/ANov 13, 2026
CVE-2026-111547: Dell: Dell PowerStore contains an out-of-bounds read vulnerability8.1 HighN/AN/ANov 13, 2026
CVE-2026-109445: PLANET Technology Corp. PLANET GS-5220-8P2T2S: PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer…9.8 Critical9.3 CriticalN/ANov 13, 2026
CVE-2026-109094: X.Org: A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland…N/A8.5 HighN/ANov 13, 2026
CVE-2026-109093: X.Org: A stack buffer overflow in ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server…N/A8.5 HighN/ANov 13, 2026
CVE-2026-109092: X.Org: Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and…7.8 HighN/AN/ANov 13, 2026
CVE-2026-107524: Dell: Dell PowerStore contains an integer overflow vulnerability8.8 HighN/AN/ANov 13, 2026
CVE-2026-107523: Dell: Dell PowerStore contains an integer overflow vulnerability8.7 HighN/AN/ANov 13, 2026
CVE-2026-107522: Dell: Dell PowerStore contains an Improper Authorization vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-103769: Acowebs PDF Invoices and Packing Slips For WooCommerce: Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce…7.2 HighN/AN/ANov 13, 2026
CVE-2026-128970: esaqa GmbH Psono: Psono Server Community Edition versions 1.12.6 through 7.5.0 and Psono Server Enterprise Edition before 7.5.1 do not…5.4 MediumN/AN/ANov 13, 2026
CVE-2026-92241: zephyrproject zephyr: The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in…5.7 MediumN/AN/ANov 13, 2026
CVE-2026-91094: Debian dpkg: A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could…N/AN/AN/ANov 13, 2026
CVE-2026-86353: Dell: Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with…5.0 MediumN/AN/ANov 13, 2026
CVE-2026-82179: Dell: Dell PowerStore contains an authorization bypass vulnerability4.9 MediumN/AN/ANov 13, 2026
CVE-2026-82177: Dell: Dell PowerStore contains an OS Command Injection vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-77706: Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer: Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-128790: Eclipse Foundation Eclipse BaSyx Go Components: In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository…N/A7.1 HighN/ANov 13, 2026
CVE-2026-125800: Brainstorm Force Spectra: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-124761: RT-Labs P-Net: P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and…N/A7.1 HighN/ANov 13, 2026
CVE-2026-124759: RT-Labs P-Net: P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm…N/A7.1 HighN/ANov 13, 2026
CVE-2026-116413: Dell: Dell PowerStore contains a use-of-broken-cryptography vulnerability7.1 HighN/AN/ANov 13, 2026
CVE-2026-116412: Dell: Dell PowerStore contains an insecure-file-permissions vulnerability5.5 MediumN/AN/ANov 13, 2026
CVE-2026-116411: Dell: Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability8.8 HighN/AN/ANov 13, 2026
226-250 of 532044