The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-127093: rustrak: Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update…5.5 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-127092: build-admin BuildAdmin: BuildAdmin 1.0.1 through 2.3.9 contains a stored cross-site scripting vulnerability that allows unauthenticated…6.1 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127091: Jadaptive: Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1,…6.8 Medium7.6 HighN/ANov 13, 2026
CVE-2026-127090: Jadaptive: Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1,…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-127088: Bubka 2FAuth: 2FAuth before 9.0.1 contains a weak password recovery vulnerability that allows unauthenticated attackers to poison…8.1 High8.6 HighN/ANov 13, 2026
CVE-2026-127087: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to revoke other…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-127086: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to take over other…6.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127085: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127084: teableio teable: Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated…7.3 High8.5 HighN/ANov 13, 2026
CVE-2026-127083: huginn: Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because…6.4 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127082: huginn: Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to…7.7 High8.3 HighN/ANov 13, 2026
CVE-2026-127081: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127080: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy users…9.9 Critical9.4 CriticalN/ANov 13, 2026
CVE-2026-127079: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticated…7.4 High9.1 CriticalN/ANov 13, 2026
CVE-2026-127078: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-127077: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-127076: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a broken access control vulnerability that allows authenticated users to list…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-127075: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users to read…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-127074: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with build…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127073: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain…9.9 Critical9.4 CriticalN/ANov 13, 2026
CVE-2026-126955: glanceapp glance: Glance from 0.8.0 before 0.8.8 contains an observable response discrepancy in handlePageRequest and…5.3 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-126954: glanceapp glance: Glance from 0.7.9 before 0.8.8 contains a stored cross-site scripting vulnerability that allows malicious extension…4.7 Medium2.3 LowN/ANov 13, 2026
CVE-2026-126953: Shenzhen Cudy Technology Co., Ltd. TR3000 1.0: Cudy TR3000 before 2.5.42 contains an OS command injection vulnerability that allows a malicious or compromised ACS to…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-126952: diced zipline: Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-126951: diced zipline: Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server…N/A6.9 MediumN/ANov 13, 2026
401-425 of 532044