The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118572: Drupal OAuth Login - OAuth OIDC SSO: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth Login - OAuth OIDC SSO allows…N/AN/AN/AOct 30, 2026
CVE-2026-118571: Drupal Media Alias Display: Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting…N/AN/AN/AOct 30, 2026
CVE-2026-118570: Drupal Fasttoggle: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Fasttoggle allows Cross Site Request ForgeryN/AN/AN/AOct 30, 2026
CVE-2026-118569: Drupal Fasttoggle: Incorrect Authorization vulnerability in Drupal Fasttoggle allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118568: Drupal Content Sync (content-sync.io): Insecure Storage of Sensitive Information vulnerability in Drupal Content Sync (content-sync.io) allows Retrieve…N/AN/AN/AOct 30, 2026
CVE-2026-118567: Drupal Bulk Update User Roles: Incorrect Authorization vulnerability in Drupal Bulk Update User Roles allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118565: Drupal GroupEx PRO ( Daxko ) integration: Vulnerability in Drupal GroupEx PRO ( Daxko ) integrationN/AN/AN/AOct 30, 2026
CVE-2026-118564: Drupal PayUmoney for Drupal Commerce: Vulnerability in Drupal PayUmoney for Drupal CommerceN/AN/AN/AOct 30, 2026
CVE-2026-118563: Drupal CacheFlush: Vulnerability in Drupal CacheFlushN/AN/AN/AOct 30, 2026
CVE-2026-118562: Drupal Single Content Sync: Deserialization of Untrusted Data vulnerability in Drupal Single Content Sync allows Object InjectionN/AN/AN/AOct 30, 2026
CVE-2026-118561: Drupal Single Content Sync: External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path TraversalN/AN/AN/AOct 30, 2026
CVE-2026-118560: Drupal Commerce Stripe: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce…N/AN/AN/AOct 30, 2026
CVE-2026-118559: Drupal Commerce Stripe: Improper Verification of Cryptographic Signature vulnerability in Drupal Commerce Stripe allows Signature SpoofN/AN/AN/AOct 30, 2026
CVE-2026-118558: Drupal Commerce Stripe: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Stripe allows Cross Site Request ForgeryN/AN/AN/AOct 30, 2026
CVE-2026-118557: Drupal Commerce Shipping: Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118556: Drupal Commerce Shipping: Incorrect Authorization vulnerability in Drupal Commerce Shipping allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118555: Drupal Commerce License: Incorrect Authorization vulnerability in Drupal Commerce License allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118554: Drupal OpenID Connect Client: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID Connect Client allows…N/AN/AN/AOct 30, 2026
CVE-2026-118553: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118552: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118551: Drupal AI (Artificial Intelligence): Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded…N/AN/AN/AOct 30, 2026
CVE-2026-118550: Drupal AI (Artificial Intelligence): Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows…N/AN/AN/AOct 30, 2026
CVE-2026-118549: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118548: Drupal AI (Artificial Intelligence): Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource InjectionN/AN/AN/AOct 30, 2026
CVE-2026-118546: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
301-325 of 413289