The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116883: SemanticMediaWiki: Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116882: SemanticMediaWiki: Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116881: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116880: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin…7.1 High7.1 HighN/AOct 27, 2026
CVE-2026-116879: SemanticMediaWiki: Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task…5.4 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116878: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-116877: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows…6.5 Medium8.7 HighN/AOct 27, 2026
CVE-2026-116876: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary…7.1 High7.1 HighN/AOct 27, 2026
CVE-2026-116875: SemanticMediaWiki: SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116874: SemanticMediaWiki: SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116873: SemanticMediaWiki: Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module…7.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-116872: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-116871: SemanticMediaWiki: Semantic MediaWiki 3.0.0 before 7.3.1 contains an uncontrolled recursion vulnerability in…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-116870: Octopus Deploy Octopus Server: In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistentlyN/A8.7 HighN/AOct 27, 2026
CVE-2026-111548: Moxa NPort W2150A-W4/W2250A-W4 Series: A stack-based buffer overflow vulnerability exists in the web management interface of affected Moxa wireless device…N/A5.3 MediumN/AOct 27, 2026
CVE-2026-110737: vaadin: The push endpoint of a Vaadin application that uses server push reflects the request Origin into the…N/A2.3 LowN/AOct 27, 2026
CVE-2026-86577: Hitachi: Out-of-bounds Write Vulnerability in JP1 Products9.4 CriticalN/AN/AOct 27, 2026
CVE-2026-86576: Hitachi: Heap-based Buffer Overflow Vulnerability in JP1 Products9.4 CriticalN/AN/AOct 27, 2026
CVE-2026-86575: Hitachi: Stack-based Buffer Overflow Vulnerability in JP1 Products9.4 CriticalN/AN/AOct 27, 2026
CVE-2026-86574: Hitachi JP1/Base: Heap-based Buffer Overflow Vulnerability in JP1/Base9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-85299: Google Cloud Compute Engine: A Missing Authorization vulnerability in the disks.createSnapshot and regionDisks.createSnapshot APIs in Google Compute…N/A8.3 HighN/AOct 27, 2026
CVE-2026-82122: Hitachi: Stack-based Buffer Overflow Vulnerability in HiRDB9.4 CriticalN/AN/AOct 27, 2026
CVE-2026-82121: Hitachi: Origin Validation Error Vulnerability in HiRDB7.5 HighN/AN/AOct 27, 2026
CVE-2026-82120: Hitachi: Heap-based Buffer Overflow Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-82119: Hitachi: OS Command Injection Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
451-475 of 522616