The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-63163: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route…7.5 High8.7 HighN/AOct 13, 2026
CVE-2026-63162: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary…8.8 High8.7 HighN/AOct 13, 2026
CVE-2026-63161: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack…8.8 High8.6 HighN/AOct 13, 2026
CVE-2026-63160: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63159: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63158: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63154: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space…8.8 High8.7 HighN/AOct 13, 2026
CVE-2026-63153: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63152: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated…8.1 High8.6 HighN/AOct 13, 2026
CVE-2026-63149: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict…7.4 High9.1 CriticalN/AOct 13, 2026
CVE-2026-63148: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63147: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated…5.4 Medium5.1 MediumN/AOct 13, 2026
CVE-2026-63146: Omnispace Agora Project: Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled…9.8 Critical9.3 CriticalN/AOct 13, 2026
CVE-2026-56826: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel5.4 MediumN/AN/AOct 13, 2026
CVE-2026-55601: folkertvanheusden multitail: MultiTail is a utility for monitoring multiple log files in one terminal7.3 HighN/AN/AOct 13, 2026
CVE-2026-48398: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-48383: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-48382: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-16753: Lowcoder: Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows…N/AN/AN/AOct 13, 2026
CVE-2026-110084: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an XML Injection (aka Blind XPath Injection) vulnerability that could result in…7.1 HighN/AN/AOct 13, 2026
CVE-2026-110083: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…7.1 HighN/AN/AOct 13, 2026
CVE-2026-110082: Adobe: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-110081: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/AOct 13, 2026
CVE-2026-110080: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
CVE-2026-110079: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/AOct 13, 2026
351-375 of 417606
‹›