The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126472: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability in ccdaservice/ccda_gateway.php that allows any…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-126476: openemr: OpenEMR before 8.5.0 contains a reflected cross-site scripting vulnerability in the Application module's auto-suggest…6.1 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126480: openemr: OpenEMR before 8.5.0 contains an sql injection vulnerability in CcrTable::insertApprovedData() that allows…8.1 High8.6 HighN/ANov 13, 2026
CVE-2026-126484: openemr: OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in printed_fee_sheet.php that allows…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126488: openemr: OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal OnsiteDocument.Query endpoint, where…7.7 High8.3 HighN/ANov 13, 2026
CVE-2026-126492: openemr: OpenEMR before 8.5.0 contains a second-order sql injection vulnerability that allows low-privileged authenticated users…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-126937: diced zipline: Zipline before 4.6.5 contains a TOCTOU race condition in the POST /api/setup endpoint that allows unauthenticated…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-126941: diced zipline: Zipline through 4.6.2 contains an authorization bypass vulnerability that allows authenticated administrators to read…6.8 Medium8.2 HighN/ANov 13, 2026
CVE-2026-126945: diced zipline: Zipline before 4.5.1 contains a stored cross-site scripting vulnerability in the HighlightCode component that renders…8.7 High9.3 CriticalN/ANov 13, 2026
CVE-2026-126947: diced zipline: Zipline before 4.5.0 contains a stored open redirect vulnerability that allows authenticated users to set arbitrary…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126951: diced zipline: Zipline through 4.4.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary server…N/A6.9 MediumN/ANov 13, 2026
CVE-2026-127084: teableio teable: Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated…7.3 High8.5 HighN/ANov 13, 2026
CVE-2026-127093: rustrak: Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update…5.5 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-127094: Pagelayer Team Pagelayer: Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in…7.6 High7.2 HighN/ANov 13, 2026
CVE-2026-128016: php frankenphp: FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of…6.5 Medium8.3 HighN/ANov 13, 2026
CVE-2026-128020: php frankenphp: FrankenPHP before 1.13.2 contains an uncontrolled recursion vulnerability in its PHP-to-Go array converter that fails…5.9 Medium8.2 HighN/ANov 13, 2026
CVE-2026-128024: php frankenphp: FrankenPHP before 1.13.0 contains a denial of service vulnerability in goArray() that allows remote attackers to abort…5.9 Medium8.2 HighN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
476-500 of 532044