The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126945: diced zipline: Zipline before 4.5.1 contains a stored cross-site scripting vulnerability in the HighlightCode component that renders…8.7 High9.3 CriticalN/ANov 13, 2026
CVE-2026-126947: diced zipline: Zipline before 4.5.0 contains a stored open redirect vulnerability that allows authenticated users to set arbitrary…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126951: diced zipline: Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server…N/A6.9 MediumN/ANov 13, 2026
CVE-2026-127084: teableio teable: Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated…7.3 High8.5 HighN/ANov 13, 2026
CVE-2026-127093: rustrak: Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update…5.5 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-127094: Pagelayer Team Pagelayer: Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in…7.6 High7.2 HighN/ANov 13, 2026
CVE-2026-128016: php frankenphp: FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of…6.5 Medium8.3 HighN/ANov 13, 2026
CVE-2026-128020: php frankenphp: FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter that fails…5.9 Medium8.2 HighN/ANov 13, 2026
CVE-2026-128024: php frankenphp: FrankenPHP before 1.13.0 contains a denial of service vulnerability in goArray() that allows remote attackers to abort…5.9 Medium8.2 HighN/ANov 13, 2026
CVE-2026-128028: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…4.7 Medium2.3 LowN/ANov 13, 2026
CVE-2026-128032: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 accepts the free (No Payment Information…4.4 Medium5.9 MediumN/ANov 13, 2026
CVE-2026-128042: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128046: OpenMage magento-lts: OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file upload…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-128051: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…3.5 Low4.8 MediumN/ANov 13, 2026
CVE-2026-128331: miniflux: Miniflux before 2.3.5 contains an unverified password change vulnerability that allows holders of a signed-in session…5.3 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-128335: Contao: Contao 4.6.0 before 5.3.54, 5.4.0-RC1 before 5.7.17, and 6.0.0-RC1 before 6.0.6 fails to invalidate existing user…3.7 Low2.1 LowN/ANov 13, 2026
CVE-2026-116418: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Incorrect Authorization vulnerability7.5 HighN/AN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
476-500 of 532044