The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-101213: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability7.8 HighN/AN/AOct 30, 2026
CVE-2026-101210: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…7.2 HighN/AN/AOct 30, 2026
CVE-2026-101209: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains a Server-Side Request Forgery (SSRF) vulnerability2.7 LowN/AN/AOct 30, 2026
CVE-2025-68395: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSSN/A5.1 MediumN/AOct 30, 2026
CVE-2025-68394: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68393: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68392: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved…N/A5.1 MediumN/AOct 30, 2026
CVE-2025-68391: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file uploadN/A5.3 MediumN/AOct 30, 2026
CVE-2026-85268: Google Cloud Identity Platform and Firebase Authentication: A Cross-Site Scripting (XSS) (CWE-79) vulnerability in the auth/handler in Google Cloud Identity Platform and Firebase…N/A8.7 HighN/AOct 30, 2026
CVE-2026-22114: Delta Electronics Delta UFC500: HTTP basic auth enforces no retry limit or backoffN/A5.3 MediumN/AOct 30, 2026
CVE-2026-22110: Delta Electronics Delta UFC500: The web server does not check authentication on POST or PUTN/A8.7 HighN/AOct 30, 2026
CVE-2026-22109: Delta Electronics Delta UFC500: The shipped WebUI template database retains the factory default passwords for all five account types in cleartextN/A8.4 HighN/AOct 30, 2026
CVE-2026-22105: Delta Electronics Delta UFC500: Delta UFC500 charging stations derive the default credentials of the Service account from character positions of the…N/A8.7 HighN/AOct 30, 2026
CVE-2026-116366: ClickHouse: An issue has been discovered in ClickHouse Server that, under certain conditions, could allow an unauthenticated user…N/A9.5 CriticalN/AOct 30, 2026
CVE-2025-31704: Dahua Intelligent Connection Center: A vulnerability has been found in the Dahua Intelligent Connection Center9.8 CriticalN/AN/AOct 30, 2026
CVE-2026-14467: Forocoches Forocoches comments editor: An information disclosure vulnerability in the Forocoches comments editor that allows an attacker to obtain…N/A8.2 HighN/AOct 30, 2026
CVE-2026-97209: elixir-lang elixir: Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another…N/A5.4 MediumN/AOct 30, 2026
CVE-2026-65874: Apache Software Foundation Apache Fineract: This issue affects Apache Fineract versions up to and including 1.15.0N/AN/AN/AOct 30, 2026
CVE-2026-64618: Apache Software Foundation Apache Fineract: Improper Neutralization of Special Elements used in an SQL Command ("SQL Injection") vulnerability exists in Apache…N/AN/AN/AOct 30, 2026
CVE-2026-59396: Cloud Foundry: A denial-of-service vulnerability exists in UAA's private_key_jwt client-authentication mechanism4.9 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-59388: Cloud Foundry Foundation: Cloud Controller (CAPI) leaks sensitive data into audit logs in multiple instances: custom buildpack credentials are…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-59387: Cloud Foundry: The Nginx routing configuration for Cloud Controller blocks unauthenticated access to /internal/v4/ and /internal/v5/…8.8 HighN/AN/AOct 30, 2026
CVE-2026-59386: Cloud Foundry: A SpaceSupporter could improperly modify an application's start command and buildpack—actions requiring SpaceDeveloper…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-59385: Cloud Foundry: A user with SpaceDeveloper privileges could modify the URL of a space-scoped broker without altering its credentials,…2.7 LowN/AN/AOct 30, 2026
CVE-2026-115456: Red Hat: A flaw was found in gcc3.7 LowN/AN/AOct 30, 2026
451-475 of 418318