The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118421: Unknown WP Directory Kit: The WP Directory Kit WordPress plugin before 1.6.3 does not properly sanitise and escape a parameter used to order…N/AN/AN/ANov 12, 2026
CVE-2026-110959: Unknown Descope: The Descope WordPress plugin before 1.2.0 does not validate the authentication token it receives before creating a…N/AN/AN/ANov 12, 2026
CVE-2026-110072: Unknown Photo Gallery by 10Web: The Photo Gallery by 10Web WordPress plugin before 1.8.49 does not escape a shortcode attribute that sets a gallery…N/AN/AN/ANov 12, 2026
CVE-2026-110041: Unknown Crop Thumbnails: The Crop Thumbnails WordPress plugin before 1.10.0 does not perform object-level authorization when reading and…N/AN/AN/ANov 12, 2026
CVE-2026-106027: Unknown Oxygen MyData for WooCommerce: The Oxygen MyData for WooCommerce WordPress plugin before 3.0.9 does not have proper authorisation, nor validate the…N/AN/AN/ANov 12, 2026
CVE-2026-101107: SoftBank Corp. Air Terminal 6: An OS command Injection issue exists in Air Terminal 6 provided by SoftBank Corp8.0 High8.6 HighN/ANov 12, 2026
CVE-2026-92379: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the Notification API in Synology…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-88266: Synology DiskStation Manager (DSM): An external control of system or configuration setting vulnerability in the synomount in Synology DiskStation Manager…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-87801: Synology DiskStation Manager (DSM): An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-86343: Synology DiskStation Manager (DSM): An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager (DSM) before…6.8 MediumN/AN/ANov 12, 2026
CVE-2026-85101: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager…8.6 HighN/AN/ANov 12, 2026
CVE-2026-85098: Synology DiskStation Manager (DSM): A reachable assertion vulnerability in the synoscgi in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…5.3 MediumN/AN/ANov 12, 2026
CVE-2026-81584: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the User API in Synology…8.1 HighN/AN/ANov 12, 2026
CVE-2026-81559: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the TaskScheduler API in Synology DiskStation Manager (DSM) before…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-81558: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the SocketIo API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-81557: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-77738: Synology DiskStation Manager (DSM): A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager (DSM) before…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-76954: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology…9.8 CriticalN/AN/ANov 12, 2026
CVE-2026-75785: Synology DiskStation Manager (DSM): An improper neutralization of special elements used in an OS command vulnerability in the VPN API in Synology…7.2 HighN/AN/ANov 12, 2026
CVE-2026-74857: Synology DiskStation Manager (DSM): A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before…8.8 HighN/AN/ANov 12, 2026
CVE-2026-74850: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-19833: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the ACL API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-19414: Synology DiskStation Manager (DSM): A missing authorization vulnerability in the Promotion API in Synology DiskStation Manager (DSM) before 7.3.2-86009-5…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-19048: Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before…8.1 HighN/AN/ANov 12, 2026
CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…8.8 HighN/AN/ANov 12, 2026
26-50 of 511254