The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-83958: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-83662: Adobe: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 13, 2026
CVE-2026-75732: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/AOct 13, 2026
CVE-2026-70098: Microsoft Visual Studio Code: Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 13, 2026
CVE-2026-63174: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63172: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular,…7.1 High7.1 HighN/AOct 13, 2026
CVE-2026-63165: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63163: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route…7.5 High8.7 HighN/AOct 13, 2026
CVE-2026-63162: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary…8.8 High8.7 HighN/AOct 13, 2026
CVE-2026-63161: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack…8.8 High8.6 HighN/AOct 13, 2026
CVE-2026-63160: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63159: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63158: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63154: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space…8.8 High8.7 HighN/AOct 13, 2026
CVE-2026-63153: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63152: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63149: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63148: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63147: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63146: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled…9.8 Critical9.3 CriticalN/AOct 13, 2026
CVE-2026-56826: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel5.4 MediumN/AN/AOct 13, 2026
CVE-2026-55601: folkertvanheusden multitail: MultiTail is a utility for monitoring multiple log files in one terminal7.3 HighN/AN/AOct 13, 2026
CVE-2026-48398: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-48383: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-48382: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…10.0 CriticalN/AN/AOct 13, 2026
326-350 of 417606
‹›