The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-19048: Synology DiskStation Manager (DSM): An improper link resolution before file access vulnerability in the thumb in Synology DiskStation Manager (DSM) before…8.1 HighN/AN/ANov 12, 2026
CVE-2026-18596: Synology DiskStation Manager (DSM): An authentication bypass using an alternate path or channel vulnerability in the OTP in Synology DiskStation Manager…8.1 HighN/AN/ANov 12, 2026
CVE-2026-74857: Synology DiskStation Manager (DSM): A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager (DSM) before…8.8 HighN/AN/ANov 12, 2026
CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…8.8 HighN/AN/ANov 12, 2026
CVE-2026-13672: Synology DiskStation Manager (DSM): An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM)…8.8 HighN/AN/ANov 12, 2026
CVE-2026-117687: Six Apart Ltd.: Movable Type provided by Six Apart Ltd7.3 High6.9 MediumN/ANov 12, 2026
CVE-2026-114556: MailEnable: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability7.4 HighN/AN/ANov 12, 2026
CVE-2026-114558: OriginLab Origin Viewer: OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114568: OriginLab Origin Viewer: OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114567: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114566: OriginLab Origin Viewer: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114565: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114564: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114563: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114562: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114561: OriginLab Origin Viewer: OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114560: OriginLab Origin Viewer: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114559: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114569: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability8.8 HighN/AN/ANov 12, 2026
CVE-2026-118632: Philips Hue Bridge Pro: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability8.0 HighN/AN/ANov 12, 2026
CVE-2026-118631: Philips Hue Bridge Pro: Philips Hue Bridge Pro Argument Injection Restricted File Write Vulnerability3.8 LowN/AN/ANov 12, 2026
CVE-2026-121753: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt XE File Parsing Use-After-Free Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121752: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt LI File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-121744: Ashlar-Vellum Cobalt: Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
26-50 of 511254