The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-82121: Hitachi: Origin Validation Error Vulnerability in HiRDB7.5 HighN/AN/AOct 27, 2026
CVE-2026-82120: Hitachi: Heap-based Buffer Overflow Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-82119: Hitachi: OS Command Injection Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-82118: Hitachi: Stack-based Buffer Overflow Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-82117: Hitachi: Authentication Bypass by Spoofing Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-82116: Hitachi: Missing Authentication for Critical Function Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76939: Hitachi: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76938: Hitachi JP1/Automatic Job Management System 3 - Manager: Authentication Bypass Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76937: Hitachi JP1/Automatic Job Management System 3 - Manager: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76936: Hitachi JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76935: Hitachi JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76934: Hitachi: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76933: Hitachi: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76932: Hitachi: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-117494: Sisense Cloud BI Platform: Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format…N/A8.3 HighN/AOct 27, 2026
CVE-2026-117493: Sisense Cloud BI Platform: Stored cross-site scripting (XSS) in BloX widgetsN/A8.3 HighN/AOct 27, 2026
CVE-2026-107147: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address…N/A6.3 MediumN/AOct 27, 2026
CVE-2026-107146: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verificationN/A6.3 MediumN/AOct 27, 2026
CVE-2026-107145: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor codeN/A6.3 MediumN/AOct 27, 2026
CVE-2026-102789: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 -…N/A9.3 CriticalN/AOct 27, 2026
CVE-2026-102788: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the…N/A9.3 CriticalN/AOct 27, 2026
CVE-2026-102787: phoca.cz Phoca Download extension for Joomla: Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5N/A5.3 MediumN/AOct 27, 2026
CVE-2026-92885: Qode Themes Qode Membership: The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all…9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-65213: SMCI MBD-X12SPI: This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the…6.6 MediumN/AN/AOct 27, 2026
CVE-2026-65211: SMCI MBD-X12SPI: This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby…7.2 HighN/AN/AOct 27, 2026
451-475 of 522616