The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116430: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116427: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116426: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116425: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116424: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116423: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature…5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116422: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.3 MediumN/AN/ANov 13, 2026
CVE-2026-116421: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-116420: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-116419: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-116417: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains a Weak Password Requirements vulnerability8.1 HighN/AN/ANov 13, 2026
CVE-2026-59081: Edito Edito CMS: Edito CMS deserializes JSON data without further validationN/A8.4 HighN/ANov 13, 2026
CVE-2026-59080: Edito Edito CMS: Edito CMS sends JWT token via GET requestsN/A2.1 LowN/ANov 13, 2026
CVE-2026-59079: Edito Edito CMS: Edito CMS restricts the ability to upload files via the UI to specific file typesN/A7.1 HighN/ANov 13, 2026
CVE-2026-59078: Edito Edito CMS: Edito CMS is vulnerable to Stored XSS in avatar upload functionalityN/A5.1 MediumN/ANov 13, 2026
CVE-2026-59077: Edito Edito CMS: Edito CMS is vulnerable to Stored XSS via content parameter in Tiny editor functionalityN/A5.1 MediumN/ANov 13, 2026
CVE-2026-59076: Edito Edito CMS: Edito CMS is vulnerable to Stored Cross-Site Scripting (XSS)N/A5.1 MediumN/ANov 13, 2026
CVE-2026-59075: Edito Edito CMS: Edito CMS is vulnerable to Dynamic LINQ injectionN/A7.1 HighN/ANov 13, 2026
CVE-2026-59074: Edito Edito CMS: Edito CMS is vulnerable to improper cryptographic signature verification in the JWT refresh logicN/A8.7 HighN/ANov 13, 2026
376-400 of 427590