The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-106023: Apache Software Foundation Apache HTTP Server: NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processingN/AN/AN/ANov 11, 2026
CVE-2026-102589: Grafana: When independent Grafana instances share the same [rendering] renderer_token, an image renderer key issued by one…7.1 HighN/AN/ANov 11, 2026
CVE-2026-124746: Red Hat: A flaw was found in BusyBox5.5 MediumN/AN/ANov 11, 2026
CVE-2026-49236: Apache Software Foundation Apache XML Graphics Batik: Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics BatikN/AN/AN/ANov 11, 2026
CVE-2026-48479: AMD: Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds,…N/A6.9 MediumN/ANov 11, 2026
CVE-2026-40853: Apache Software Foundation Apache XML Graphics Batik: A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFontN/AN/AN/ANov 11, 2026
CVE-2026-125850: webriti Appointment Dark: Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125849: webriti Shk Corporate: Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125848: webriti Leo: Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125847: webriti vdperanto: Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125846: webriti Mazino: Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125845: webriti vdequator: Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125844: webriti vice: Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125843: webriti Spasalon: Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125842: webriti Wallstreet Agency: Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125841: webriti Heroic: Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125840: webriti Rambo: Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125839: webriti ElitePress: Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125838: webriti Quality: Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-123040: TrueConf TrueConf Server: An attacker who gains the ability to execute arbitrary code on a system with TrueConf Server (Linux) versions from…7.8 High8.5 HighN/ANov 11, 2026
CVE-2026-0470: AMD: Null pointer dereference in AMD Embedded SPI Flash driver could allow a local user to potentially cause a loss of…N/A6.8 MediumN/ANov 11, 2026
CVE-2026-94125: Apache Software Foundation Apache Storm: Nimbus returns the worker placement of every topology running on a supervisor, including the host, port, owner and…N/AN/AN/ANov 11, 2026
CVE-2026-126663: Contao: Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 contains a path traversal vulnerability that…4.3 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126662: Contao: Contao 4.0.0 before 5.3.54, 5.4.0 before 5.7.17, and 6.0.0 before 6.0.6 contains an access control bypass vulnerability…7.1 High7.1 HighN/ANov 11, 2026
CVE-2026-126659: blueprintue blueprintue-self-hosted-edition: BlueprintUE Self-Hosted Edition 1.0.0 before 4.3.5 contains a resource exhaustion vulnerability that allows…7.5 High8.7 HighN/ANov 11, 2026
276-300 of 511254