The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-105924: Qt: A NULL pointer dereference vulnerability in the Qt QCborValue to JSON conversion of the Qt Core module.N/A4.3 MediumN/AOct 30, 2026
CVE-2026-101214: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…7.2 HighN/AN/AOct 30, 2026
CVE-2026-101213: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability7.8 HighN/AN/AOct 30, 2026
CVE-2026-101210: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…7.2 HighN/AN/AOct 30, 2026
CVE-2026-101209: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability2.7 LowN/AN/AOct 30, 2026
CVE-2025-68395: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSSN/A5.1 MediumN/AOct 30, 2026
CVE-2025-68394: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68393: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68392: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved…N/A5.1 MediumN/AOct 30, 2026
CVE-2025-68391: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file uploadN/A5.3 MediumN/AOct 30, 2026
CVE-2026-119586: SQLite: SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119565: Plausible Plausible Analytics: Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119561: phpMyAdmin: phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in…6.8 Medium7.6 HighN/AOct 30, 2026
CVE-2026-119557: n8n-io n8n: n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119553: Moodle Project moodle: Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path…6.5 Medium7.1 HighN/AOct 30, 2026
CVE-2026-119549: jellyfin: Jellyfin through 12.4 contains a server-side request forgery vulnerability that lets authenticated users bypass…7.1 High7.1 HighN/AOct 30, 2026
CVE-2026-119545: forgejo: Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery…5.3 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-119426: phpMyAdmin: phpMyAdmin through 5.2.3 contains a cross-site request forgery vulnerability that allows remote attackers to execute…7.5 High7.7 HighN/AOct 30, 2026
CVE-2026-119422: juspay hyperswitch: Juspay Hyperswitch before 1.128.0 contains an authentication bypass vulnerability that allows unauthenticated attackers…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119418: cakephp: CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying…8.1 High9.2 CriticalN/AOct 30, 2026
CVE-2026-119414: bitwarden server: Bitwarden Server before 2026.10.1 on Entity Framework backends contains an authorization bypass vulnerability that…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119379: SQLite: SQLite before 3.54.0 built with the session extension contains a heap buffer overflow vulnerability in…7.8 High8.5 HighN/AOct 30, 2026
CVE-2025-31704: Dahua Intelligent Connection Center: A vulnerability has been found in the Dahua Intelligent Connection Center9.8 CriticalN/AN/AOct 30, 2026
CVE-2026-116366: ClickHouse: An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user…N/A9.5 CriticalN/AOct 30, 2026
CVE-2026-22110: Delta Electronics Delta UFC500: The web server does not check authentication on POST or PUTN/A8.7 HighN/AOct 30, 2026
226-250 of 413289