The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112778: traefik: Traefik before 2.11.46, 3.x before 3.6.17, and 3.7.0 lack namespace validation for Ingress and Service annotations in…N/A6.4 MediumN/AOct 19, 2026
CVE-2026-112777: craftcms cms: Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a blocklist bypass in the Twig create() function because its…7.2 High8.7 HighN/AOct 19, 2026
CVE-2026-112775: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains an authentication bypass vulnerability that allows attackers to reuse…7.5 High8.7 HighN/AOct 19, 2026
CVE-2026-112774: craftcms cms: Craft CMS from 5.8.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated…7.2 High8.7 HighN/AOct 19, 2026
CVE-2026-112773: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…8.8 High8.7 HighN/AOct 19, 2026
CVE-2026-112772: craftcms cms: Craft CMS from 5.0.0 before 5.11.0 contains a remote code execution vulnerability that allows authenticated Control…8.8 High8.7 HighN/AOct 19, 2026
CVE-2026-112770: craftcms cms: Craft CMS 4.x before 4.18.8 and 5.x before 5.11.0 contains a remote code execution vulnerability in the Twig group…8.8 High8.7 HighN/AOct 19, 2026
CVE-2026-112769: parse-community parse-server: Parse Server before 8.6.98 and 9.0.0 before 9.10.3-alpha.1 does not enforce the create and addField class-level…N/A2.3 LowN/AOct 19, 2026
CVE-2026-112768: parse-community parse-server: Parse Server before 8.6.99 and 9.0.0 before 9.10.3-alpha.2 evaluates checks against the target account during a user…N/A6.9 MediumN/AOct 19, 2026
CVE-2026-112297: ptbsare anx-calibre-manager: A flaw has been found in ptbsare anx-calibre-manager up to 1.13.124.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-112260: Red Hat: A flaw was found in GIMP7.1 HighN/AN/AOct 19, 2026
CVE-2026-112254: agit8or1 clientst0r: A vulnerability was found in agit8or1 clientst0r up to 3.17.5864.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-111766: markdown-it: markdown-it is a Markdown parser3.7 LowN/AN/AOct 19, 2026
CVE-2024-54581: Rejected reason: This candidate was in a CNA pool that was not assigned to any issues.N/AN/AN/AOct 19, 2026
CVE-2026-112299: smrealms smr: A vulnerability was determined in smrealms smr up to f40380c017bc35cd8db6ffdb9d4e78bf65b9d43d4.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-71170: Dell Application Store: Dell Application Store, versions prior to 26.05.0.7, contains an Uncontrolled Path Element vulnerability7.8 HighN/AN/AOct 19, 2026
CVE-2026-112259: Red Hat: A flaw was found in GIMP5.5 MediumN/AN/AOct 19, 2026
CVE-2026-112252: Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management Information System: A vulnerability has been found in Wuxi Wubang Security Software Wubang Five-in-One Safety Production Management…7.3 High5.5 MediumN/AOct 19, 2026
CVE-2026-112251: antoinersx clawhost: A vulnerability was detected in antoinersx clawhost up to 0.0.454.3 Medium2.1 LowN/AOct 19, 2026
CVE-2026-110688: Inefficient Algorithmic ComplexityN/AN/AN/AOct 19, 2026
CVE-2026-110687: Improper Handling of Unicode EncodingN/AN/AN/AOct 19, 2026
CVE-2026-110686: Use After FreeN/AN/AN/AOct 19, 2026
CVE-2026-110685: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110684: Missing Release of Memory after Effective LifetimeN/AN/AN/AOct 19, 2026
CVE-2026-110682: Interpretation ConflictN/AN/AN/AOct 19, 2026
426-450 of 407346