The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125363: SecOps-7 MikroDash: MikroDash before 0.8.79 contains a server-side request forgery vulnerability that allows any signed-in user, including…5.4 Medium5.3 Medium0%Nov 10, 2026
CVE-2026-125362: haiwen seahub: Seahub through 14.0.10 contains a weak randomness vulnerability in MultiShareLinksBatch.post() that generates batch…3.1 Low2.3 Low0%Nov 10, 2026
CVE-2026-125361: Tencent BrowserSkill: Tencent BrowserSkill through 0.4.2 contains a missing authentication vulnerability that allows local attackers to…6.3 Medium7.2 High0%Nov 10, 2026
CVE-2026-125359: fancydirty mediary-scout: Mediary Scout before 2026.11.05 contains a server-side request forgery vulnerability that allows any authenticated…4.3 Medium5.3 Medium0%Nov 10, 2026
CVE-2026-125358: rehan-remade universal-modder: Universal-modder before commit e88f6876745427321eb755ebc98276063a962d8a contains a missing WebSocket Origin validation…8.1 High7.2 High0%Nov 10, 2026
CVE-2026-125357: munin-monitoring munin: Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of…5.3 Medium6.9 Medium0%Nov 10, 2026
CVE-2026-125078: SourceCodester Smart Attendance System with QR Code Scanner: A security flaw has been discovered in SourceCodester Smart Attendance System with QR Code Scanner 1.06.3 Medium2.1 Low0%Nov 10, 2026
CVE-2026-125077: SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability was determined in SourceCodester Smart Attendance System with QR Code Scanner 1.04.3 Medium2.1 Low0%Nov 10, 2026
CVE-2026-125076: SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.07.3 High5.5 Medium0%Nov 10, 2026
CVE-2026-117477: GMO Prime Strategy Co., Ltd.: KUSANAGI provided by GMO Prime Strategy Co., Ltd6.1 Medium5.1 Medium0%Nov 10, 2026
CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.025.3 Medium5.5 Medium0%Nov 10, 2026
CVE-2026-125404: ettercap: Ettercap through 0.8.4.1 contains an integer underflow in ccmp_decrypt() in src/ec_encryption_ccmp.c that subtracts the…7.5 High7.7 High0%Nov 9, 2026
CVE-2026-125400: ettercap: Ettercap through 0.8.4.1 contains a use-after-free vulnerability in func_pcre() in src/ec_filter.c that reads the PCRE2…8.8 High8.7 High0%Nov 9, 2026
CVE-2026-125396: ArtifexSoftware ghostpdl: Ghostscript before 10.08.0 contains a -dSAFER bypass vulnerability in the .putgstringcopy procedure in gs_fonts.ps,…7.8 High8.5 High0%Nov 9, 2026
CVE-2026-125392: webmin: Webmin through 2.670 contains a stored cross-site scripting vulnerability in bind8/edit_recs.cgi that outputs raw DNS…5.4 Medium5.1 Medium0%Nov 9, 2026
CVE-2026-125388: Intermesh Group-Office: Intermesh Group-Office before 6.8.181, 25.0.116, and 26.0.58 contains a missing authorization vulnerability that allows…6.5 Medium7.1 High0%Nov 9, 2026
CVE-2026-125384: go2ismail Asp.Net-Core-Inventory-Order-Management-System: INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers…9.8 Critical9.3 Critical0%Nov 9, 2026
CVE-2026-125380: gcpaas DataRoom: DataRoom through 3.0.0 contains an incorrect authorization vulnerability in DatasetController.runTest that allows…6.5 Medium7.1 High0%Nov 9, 2026
CVE-2026-125376: Mereithhh vanblog: VanBlog through 0.54.0 contains an information disclosure vulnerability that allows unauthenticated attackers to read…5.3 Medium6.9 Medium0%Nov 9, 2026
CVE-2026-125372: getrebuild rebuild: REBUILD before 4.5.3 contains an authorization bypass vulnerability in FeedsListController fetchDetails and…4.3 Medium5.3 Medium0%Nov 9, 2026
CVE-2026-125368: YeQing17-2026 OmniAgent: OmniAgent through commit 12b98c5 contains an approval bypass vulnerability in ReflexionAgent._is_safe_bash_command that…7.5 High7.7 High0%Nov 9, 2026
CVE-2026-125364: frab: frab through 0.9.1 contains a privilege escalation vulnerability that allows authenticated crew users to grant…8.1 High8.6 High0%Nov 9, 2026
CVE-2026-125360: Southclaws storyden: Storyden through 1.26.16 contains a privilege escalation vulnerability that allows users holding MANAGE_ROLES to grant…7.2 High8.6 High0%Nov 9, 2026
CVE-2026-125075: SourceCodester Smart Attendance System with QR Code Scanner: A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.07.3 High6.9 Medium0%Nov 9, 2026
CVE-2026-115934: craftcms cms: An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search,…9.8 Critical9.3 Critical0%Nov 9, 2026
451-475 of 426591