The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-123975: Grid Community Forum: Grid Community Toolkit before 6.2.20261111 (globus-gss-assist before 12.9) contains a heap out-of-bounds write in…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-121776: WP Chill Passster: Missing Authorization vulnerability in WP Chill Passster content-protector allows Exploiting Incorrectly Configured…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-120835: VillaTheme AFFI – Affiliate Marketing for WooCommerce: Deserialization of Untrusted Data vulnerability in VillaTheme AFFI – Affiliate Marketing for WooCommerce…8.8 HighN/AN/ANov 13, 2026
CVE-2026-119517: VillaTheme Catna – Woo Name Your Price and Offers: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme Catna…7.1 HighN/AN/ANov 13, 2026
CVE-2026-119512: Tribulant Software Newsletters: Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newsletters-lite allows Object…8.8 HighN/AN/ANov 13, 2026
CVE-2026-119102: Progress Software Telerik UI for Blazor: In Telerik UI for Blazor, versions v12.0.0 through 15.2.0, an improper input validation vulnerability exists, where the…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-118976: Progress Software Telerik UI for Blazor: In Progress® Telerik® UI for Blazor versions v11.1.0 through v14.0.0, the demo application's Chat AI Integration…7.5 HighN/AN/ANov 13, 2026
CVE-2026-111547: Dell: Dell PowerStore contains an out-of-bounds read vulnerability8.1 HighN/AN/ANov 13, 2026
CVE-2026-109445: PLANET Technology Corp. PLANET GS-5220-8P2T2S: PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer…9.8 Critical9.3 CriticalN/ANov 13, 2026
CVE-2026-109094: X.Org: A integer overflow that can lead to a buffer overrread in the XRes QueryResourceBytes Swap Path in the X.Org xwayland…N/A8.5 HighN/ANov 13, 2026
CVE-2026-109093: X.Org: A stack buffer overflow in ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server…N/A8.5 HighN/ANov 13, 2026
CVE-2026-109092: X.Org: Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and…7.8 HighN/AN/ANov 13, 2026
CVE-2026-107524: Dell: Dell PowerStore contains an integer overflow vulnerability8.8 HighN/AN/ANov 13, 2026
CVE-2026-107523: Dell: Dell PowerStore contains an integer overflow vulnerability8.7 HighN/AN/ANov 13, 2026
CVE-2026-107522: Dell: Dell PowerStore contains an Improper Authorization vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-103769: Acowebs PDF Invoices and Packing Slips For WooCommerce: Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce…7.2 HighN/AN/ANov 13, 2026
CVE-2026-92241: zephyrproject zephyr: The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in…5.7 MediumN/AN/ANov 13, 2026
CVE-2026-91094: Debian dpkg: A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could…N/AN/AN/ANov 13, 2026
CVE-2026-86353: Dell: Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with…5.0 MediumN/AN/ANov 13, 2026
CVE-2026-82179: Dell: Dell PowerStore contains an authorization bypass vulnerability4.9 MediumN/AN/ANov 13, 2026
CVE-2026-82177: Dell: Dell PowerStore contains an OS Command Injection vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-77706: Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer: Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-128790: Eclipse Foundation Eclipse BaSyx Go Components: In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository…N/A7.1 HighN/ANov 13, 2026
CVE-2026-127125: RT-Labs P-Net: P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-127124: RT-Labs P-Net: P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID,…N/A7.1 HighN/ANov 13, 2026
276-300 of 532044