The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119122: unclecode crawl4ai: Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API…5.3 Medium6.9 MediumN/AOct 29, 2026
CVE-2026-119121: unclecode crawl4ai: Crawl4AI from 0.9.0 before 0.9.5 contains a JavaScript injection vulnerability in the Docker API server that allows…4.3 Medium5.3 MediumN/AOct 29, 2026
CVE-2026-119120: unclecode crawl4ai: Crawl4AI from 0.9.0 before 0.9.5 fails to filter the CosineStrategy model_name field in untrusted Docker API request…7.5 High7.7 HighN/AOct 29, 2026
CVE-2026-119119: unclecode crawl4ai: Crawl4AI before 0.9.5 contains a denial of service vulnerability in the Docker API server where _clamp_untrusted()…7.5 High8.7 HighN/AOct 29, 2026
CVE-2026-119118: unclecode crawl4ai: Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to…6.5 Medium8.3 HighN/AOct 29, 2026
CVE-2026-90872: Progress Software WS_FTP Server: Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software…6.6 MediumN/AN/AOct 29, 2026
CVE-2026-90871: Progress Software WS_FTP Server: Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-90870: Progress Software WS_FTP Server: A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-90869: Progress Software WS_FTP Server: A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress…7.5 HighN/AN/AOct 29, 2026
CVE-2026-90868: Progress Software WS_FTP Server: An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-90867: Progress Software WS_FTP Server: Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and…8.1 HighN/AN/AOct 29, 2026
CVE-2026-90866: Progress Software WS_FTP Server: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90865: Progress Software WS_FTP Server: An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…9.0 CriticalN/AN/AOct 29, 2026
CVE-2026-90864: Progress Software WS_FTP Server: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90863: Progress Software WS_FTP Server: Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90862: Progress Software WS_FTP Server: Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-90861: Progress Software WS_FTP Server: Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in…6.6 MediumN/AN/AOct 29, 2026
CVE-2026-84296: Progress Software WS_FTP Server: Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to…6.8 MediumN/AN/AOct 29, 2026
CVE-2026-84295: Progress Software WS_FTP Server: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…10.0 CriticalN/AN/AOct 29, 2026
CVE-2026-115793: RT-Labs P-Net: P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or…N/A8.7 HighN/AOct 29, 2026
CVE-2026-115794: RT-Labs P-Net: P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a…N/A2.3 LowN/AOct 29, 2026
CVE-2026-115795: RT-Labs P-Net: P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-111736: RT-Labs P-Net: P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request…N/A8.7 HighN/AOct 29, 2026
CVE-2026-112200: RT-Labs P-Net: P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is…N/A8.7 HighN/AOct 29, 2026
CVE-2026-84294: Progress Software WS_FTP Server: Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to…7.7 HighN/AN/AOct 29, 2026
26-50 of 538495