The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117909: Mozilla: Use-after-free in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-117904: Mozilla: Use-after-free in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-117898: Mozilla: Use-after-free in the JavaScript Engine: JIT componentN/AN/AN/AOct 27, 2026
CVE-2026-117891: Mozilla: Use-after-free in the JavaScript Engine: JIT componentN/AN/AN/AOct 27, 2026
CVE-2026-117890: Mozilla: JIT miscompilation in the JavaScript Engine: JIT componentN/AN/AN/AOct 27, 2026
CVE-2026-117889: Mozilla: Incorrect boundary conditions in the JavaScript Engine componentN/AN/AN/AOct 27, 2026
CVE-2026-117872: Mozilla: Use-after-free in the JavaScript: Standard Library componentN/AN/AN/AOct 27, 2026
CVE-2026-117870: Mozilla: Use-after-free in the JavaScript Engine componentN/AN/AN/AOct 27, 2026
CVE-2026-117865: Mozilla: Use-after-free in the JavaScript: GC componentN/AN/AN/AOct 27, 2026
CVE-2026-116627: Devolutions PowerShell Universal: Improper neutralization of input during web page generation ('Cross-site Scripting') in the notifications feature in…N/AN/AN/AOct 27, 2026
CVE-2026-117538: redaxo core: REDAXO before 5.21.0 contains a reflected cross-site scripting vulnerability in the backend packages API, where the…4.1 Medium2.1 LowN/AOct 27, 2026
CVE-2026-116889: SemanticMediaWiki: SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116888: SemanticMediaWiki: SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116887: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…5.4 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116886: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…5.4 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116884: SemanticMediaWiki: SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116875: SemanticMediaWiki: SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116874: SemanticMediaWiki: SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-117494: Sisense Cloud BI Platform: Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format…N/A8.3 High0%Oct 27, 2026
CVE-2026-117493: Sisense Cloud BI Platform: Stored cross-site scripting (XSS) in BloX widgetsN/A8.3 High0%Oct 27, 2026
CVE-2026-116824: yeswiki: YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that…6.1 Medium5.3 Medium0%Oct 27, 2026
CVE-2026-116823: yeswiki: YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.3 Medium0%Oct 27, 2026
CVE-2026-116802: cure53 DOMPurify: DOMPurify before 3.4.17 contains a cross-site scripting vulnerability that allows attackers to bypass the SMIL…6.1 Medium5.1 Medium0%Oct 27, 2026
CVE-2026-116587: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…7.5 HighN/A0%Oct 26, 2026
CVE-2026-116586: go-jose: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…N/A6.9 Medium0%Oct 26, 2026
26-50 of 10664