The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-19833: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-19414: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-19048: Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before…8.1 HighN/AN/ANov 12, 2026
CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…8.8 HighN/AN/ANov 12, 2026
CVE-2026-18633: Synology DiskStation Manager (DSM): An access of uninitialized pointer vulnerability in the nfsd in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…7.5 HighN/AN/ANov 12, 2026
CVE-2026-18596: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager…8.1 HighN/AN/ANov 12, 2026
CVE-2026-16550: Synology DiskStation Manager (DSM): An external control of file name or path vulnerability in the Media Parser in Synology DiskStation Manager (DSM) before…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-15201: Synology DiskStation Manager (DSM): An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before…5.9 MediumN/AN/ANov 12, 2026
CVE-2026-15198: Synology DiskStation Manager (DSM): A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-13672: Synology DiskStation Manager (DSM): An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM)…8.8 HighN/AN/ANov 12, 2026
CVE-2026-13656: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-124993: Synology DiskStation Manager (DSM): An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before…5.3 MediumN/AN/ANov 12, 2026
CVE-2026-117687: Six Apart Ltd.: Movable Type provided by Six Apart Ltd7.3 High6.9 MediumN/ANov 12, 2026
CVE-2026-111436: openEuler iSulad: Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux4.4 MediumN/AN/ANov 12, 2026
CVE-2026-111435: openEuler iSulad: Relative path traversal vulnerability in openEuler iSulad on Linux7.4 HighN/AN/ANov 12, 2026
CVE-2026-111434: openEuler iSulad: Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux5.6 MediumN/AN/ANov 12, 2026
CVE-2026-111433: openEuler iSulad: UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux8.6 HighN/AN/ANov 12, 2026
CVE-2026-13270: Quest NetVault Backup: Quest NetVault Backup nvpmgr Integer Underflow Denial-of-Service Vulnerability7.5 HighN/AN/ANov 12, 2026
CVE-2026-13269: Quest NetVault Backup: Quest NetVault Backup StnzCreateKey Numeric Truncation Error Denial-of-Service Vulnerability7.5 HighN/AN/ANov 12, 2026
CVE-2026-126957: zephyrproject-rtos Zephyr: An integer underflow in Zephyr's IPv4 option handling allows a remote, unauthenticated attacker to read stack memory5.3 Medium6.9 MediumN/ANov 12, 2026
CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability8.8 HighN/AN/ANov 12, 2026
CVE-2026-121741: Trimble SketchUp: Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-118632: Philips Hue Bridge Pro: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability8.0 HighN/AN/ANov 12, 2026
CVE-2026-118631: Philips Hue Bridge Pro: Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability3.8 LowN/AN/ANov 12, 2026
CVE-2026-114569: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
326-350 of 433023