The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119542: Red Hat: A flaw was found in the Ickle query parser in Infinispan4.3 MediumN/AN/AOct 30, 2026
CVE-2026-119528: Red Hat: A flaw was found in GIMP7.8 HighN/AN/AOct 30, 2026
CVE-2026-118987: CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie headerN/AN/AN/AOct 30, 2026
CVE-2026-118986: Use of Cryptographically Weak Pseudo-Random Number GeneratorN/AN/AN/AOct 30, 2026
CVE-2026-117350: n/a: Bitcoin Core prior to 29.5, 30.4, 31.2 and 32.1 is vulnerable to an OOM issue.N/AN/AN/AOct 30, 2026
CVE-2026-117028: n/a: Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the…N/AN/AN/AOct 30, 2026
CVE-2026-115683: GNOME Epiphany: A race condition in Epiphany allows a malicious website to bypass the TLS/SSL certificate warning page6.8 MediumN/AN/AOct 30, 2026
CVE-2026-112348: Themeum Kirki: Kirki plugin for WordPress before 6.2.5 contains a reCAPTCHA bypass vulnerability that allows unauthenticated attackers…6.5 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-112347: Themeum Kirki: Kirki plugin for WordPress before 6.4.1 contains a broken object-level access control vulnerability in its page REST…7.6 High7.2 HighN/AOct 30, 2026
CVE-2026-111500: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Missing Authentication for Critical Function…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-111499: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource…5.5 MediumN/AN/AOct 30, 2026
CVE-2026-111498: Dell OpenManage Enterprise: OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Resource Locking vulnerability4.7 MediumN/AN/AOct 30, 2026
CVE-2026-100355: basecamp once-campfire: Campfire is a web-based chat application3.1 LowN/AN/AOct 30, 2026
CVE-2026-119656: CoreUnion CoreShop: CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the…7.5 High8.7 HighN/AOct 30, 2026
CVE-2026-119655: CoreUnion CoreShop: CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList…7.5 High8.7 HighN/AOct 30, 2026
CVE-2026-119647: dromara RuoYi-Vue-Plus: RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-91917: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Input Validation vulnerability8.0 HighN/AN/AOct 30, 2026
CVE-2026-87768: Inefficient Algorithmic ComplexityN/AN/AN/AOct 30, 2026
CVE-2026-75882: ESET spol. s.r.o.: An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with…N/A8.5 HighN/AOct 30, 2026
CVE-2026-64860: Rejected reason: Further research determined the issue is not a vulnerability.N/AN/AN/AOct 30, 2026
CVE-2026-13576: Use of Password Hash With Insufficient Computational EffortN/AN/AN/AOct 30, 2026
CVE-2026-119038: Authorization Bypass Through User-Controlled KeyN/AN/AN/AOct 30, 2026
CVE-2026-119037: Improper Verification of Cryptographic SignatureN/AN/AN/AOct 30, 2026
CVE-2026-119036: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 30, 2026
CVE-2026-118996: Improper Removal of Sensitive Data Before Storage or TransferN/AN/AN/AOct 30, 2026
351-375 of 418318