The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111917: go-vikunja vikunja: Vikunja 2.3.0 before 2.7.0 contains an improper session validation vulnerability that allows attackers to keep…6.5 Medium7.1 HighN/AOct 17, 2026
CVE-2026-111916: admidio: Admidio before 5.0.16 contains an information disclosure vulnerability that allows unauthenticated attackers to view…5.3 Medium6.9 MediumN/AOct 17, 2026
CVE-2026-111914: admidio: Admidio from 5.0.11 before 5.0.16 contains a broken access control vulnerability in…6.5 Medium7.1 HighN/AOct 17, 2026
CVE-2026-111913: admidio: Admidio from 5.0.0 before 5.0.16 contains an authorization bypass vulnerability that allows authenticated users to…4.3 Medium5.3 MediumN/AOct 17, 2026
CVE-2026-111912: admidio: Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in…6.5 Medium7.1 HighN/AOct 17, 2026
CVE-2026-111911: thorsten phpMyFAQ: phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints…9.8 Critical9.3 CriticalN/AOct 17, 2026
CVE-2026-111910: thorsten phpMyFAQ: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in…6.5 Medium7.1 HighN/AOct 17, 2026
CVE-2026-111909: thorsten phpMyFAQ: phpMyFAQ before 4.1.9 contains a missing authorization vulnerability in the deleteUser() API that allows authenticated…8.1 High7.2 HighN/AOct 17, 2026
CVE-2026-111908: thorsten phpMyFAQ: phpMyFAQ 4.0.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a broken object-level authorization…8.3 High8.7 HighN/AOct 17, 2026
CVE-2026-111907: thorsten phpMyFAQ: phpMyFAQ 4.0.0 before 4.1.9 contains a cross-site request forgery vulnerability in the POST /admin/api/update-database…7.1 High7.1 HighN/AOct 17, 2026
CVE-2026-111906: thorsten phpMyFAQ: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a cross-site request forgery vulnerability in the…6.5 Medium7.1 HighN/AOct 17, 2026
CVE-2026-111905: thorsten phpMyFAQ: phpMyFAQ 3.2.0 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an insecure direct object reference…6.0 Medium7.0 HighN/AOct 17, 2026
CVE-2026-111904: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an information disclosure vulnerability that allows unauthenticated…5.3 Medium6.9 MediumN/AOct 17, 2026
CVE-2026-111903: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows…5.4 Medium5.1 MediumN/AOct 17, 2026
CVE-2026-111902: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability in isFaqAccessibleForUser() that…5.3 Medium6.9 MediumN/AOct 17, 2026
CVE-2026-111901: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an uncontrolled resource consumption vulnerability in the…7.5 High8.7 HighN/AOct 17, 2026
CVE-2026-111900: thorsten phpMyFAQ: phpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains an improper authorization vulnerability in…4.3 Medium5.3 MediumN/AOct 17, 2026
CVE-2026-111898: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authentication bypass vulnerability that allows Keycloak users to…7.5 High7.7 HighN/AOct 17, 2026
CVE-2026-111897: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains an authorization bypass vulnerability that allows category-restricted…7.1 High7.1 HighN/AOct 17, 2026
CVE-2026-111896: thorsten phpMyFAQ: phpMyFAQ from 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that…5.4 Medium5.1 MediumN/AOct 17, 2026
CVE-2026-111895: thorsten phpMyFAQ: phpMyFAQ 3.2.0 before 4.0.0 and 4.0.2 before 4.2.0-beta contains an authentication bypass in its Microsoft Entra ID…6.8 Medium7.6 HighN/AOct 17, 2026
CVE-2026-111894: thorsten phpMyFAQ: phpMyFAQ 3.2.1 before 4.1.9 and 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability that…5.4 Medium5.1 MediumN/AOct 17, 2026
CVE-2026-111893: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a privilege escalation vulnerability in…6.5 Medium8.5 HighN/AOct 17, 2026
CVE-2026-111892: thorsten phpMyFAQ: phpMyFAQ 4.2.0-alpha before 4.2.0-beta lacks effective rate limiting on the unauthenticated user/password/update and…6.5 Medium6.9 MediumN/AOct 17, 2026
CVE-2026-111891: thorsten phpMyFAQ: phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta contains a privilege escalation vulnerability in the group permission…5.5 Medium7.0 HighN/AOct 17, 2026
26-50 of 410450
‹›