The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123868: nodejs node: An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained stream…5.9 MediumN/AN/ANov 11, 2026
CVE-2026-65833: senapati484 iopress: iopress is a native HTTP server for Node.js with platform-specific async I/ON/A6.9 MediumN/ANov 11, 2026
CVE-2026-123867: nodejs node: A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a…4.2 MediumN/AN/ANov 11, 2026
CVE-2026-91876: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-123866: nodejs node: A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other…7.5 HighN/AN/ANov 11, 2026
CVE-2026-58505: maplibre geojson-vt: geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable…7.5 HighN/AN/ANov 11, 2026
CVE-2026-91890: Dell Ansible Storage for Unity: Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91879: Dell: Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0…8.8 HighN/AN/ANov 11, 2026
CVE-2026-91872: Dell Ansible Storage for PowerStore: Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91871: Dell Ansible Storage for PowerStore: Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability…7.4 HighN/AN/ANov 11, 2026
CVE-2026-91870: Dell Ansible Storage for PowerFlex: Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability…7.4 HighN/AN/ANov 11, 2026
CVE-2026-86364: Dell Live Optics Collector: Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability4.7 MediumN/AN/ANov 11, 2026
CVE-2026-86363: Dell Live Optics Collector: Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-82978: Revive Adserver: An authorization bypass in channel-edit.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager to…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-77168: Revive Adserver: A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-68862: Dell Terraform Provider for Dell PowerFlex: Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host…6.6 MediumN/AN/ANov 11, 2026
CVE-2026-68486: Revive Adserver: An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager,…5.4 MediumN/AN/ANov 11, 2026
CVE-2026-68485: Revive Adserver: An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-65820: aeon-toolkit aeon: aeon is a scikit-learn compatible Python library for learning from time seriesN/A8.7 HighN/ANov 11, 2026
CVE-2026-64858: ckotzbauer vulnerability-operator: vulnerability-operator scans SBOMs and Images for vulnerabilities5.3 MediumN/AN/ANov 11, 2026
CVE-2026-62971: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…7.2 HighN/AN/ANov 11, 2026
CVE-2026-61619: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…N/A8.8 HighN/ANov 11, 2026
CVE-2026-123865: nodejs node: An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors7.5 HighN/AN/ANov 11, 2026
CVE-2026-91875: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-117373: n/a: Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory TraversalN/AN/AN/ANov 11, 2026
26-50 of 511254