The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-82116: Hitachi: Missing Authentication for Critical Function Vulnerability in HiRDB9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76939: Hitachi: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76938: Hitachi JP1/Automatic Job Management System 3 - Manager: Authentication Bypass Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76937: Hitachi JP1/Automatic Job Management System 3 - Manager: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76936: Hitachi JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76935: Hitachi JP1/Automatic Job Management System 3 - Manager: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76934: Hitachi: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.8 CriticalN/AN/AOct 27, 2026
CVE-2026-76933: Hitachi: Heap-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-76932: Hitachi: Stack-based Buffer Overflow Vulnerability in JP1/Automatic Job Management System 39.4 CriticalN/AN/AOct 27, 2026
CVE-2026-117494: Sisense Cloud BI Platform: Cross-Site Scripting (XSS) in the processing of SVG images submitted to the /api/v2/ai/sessions API in the format…N/A8.3 HighN/AOct 27, 2026
CVE-2026-117493: Sisense Cloud BI Platform: Stored cross-site scripting (XSS) in BloX widgetsN/A8.3 HighN/AOct 27, 2026
CVE-2026-107147: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to 2fa authentication bypass by spoofed client address…N/A6.3 MediumN/AOct 27, 2026
CVE-2026-107146: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to session persistence after failed 2FA verificationN/A6.3 MediumN/AOct 27, 2026
CVE-2026-107145: alexandregz twofactor_gauthenticator: The twofactor_gauthenticator plugin for Roundcube is vulnerable to brute-forcing of the second-factor codeN/A6.3 MediumN/AOct 27, 2026
CVE-2026-102789: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Missing Authorization Check on Editor Controller Task in Gridbox < 2.20.4.2 -…N/A9.3 CriticalN/AOct 27, 2026
CVE-2026-102788: balbooa.com Gridbox extension for Joomla: Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.4.2 - On store product list pages, the…N/A9.3 CriticalN/AOct 27, 2026
CVE-2026-102787: phoca.cz Phoca Download extension for Joomla: Joomla Extension - phoca.cz - CSRF in category management in Phoca Download 3.1.0 - 6.1.5N/A5.3 MediumN/AOct 27, 2026
CVE-2026-92885: Qode Themes Qode Membership: The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all…9.8 CriticalN/AN/AOct 27, 2026
CVE-2026-65213: SMCI MBD-X12SPI: This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the…6.6 MediumN/AN/AOct 27, 2026
CVE-2026-65211: SMCI MBD-X12SPI: This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby…7.2 HighN/AN/AOct 27, 2026
CVE-2026-65220: SMCI MBD-X12SPI: A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate…8.8 HighN/AN/AOct 27, 2026
CVE-2026-65219: SMCI MBD-X12SPI: A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP…7.4 HighN/AN/AOct 27, 2026
CVE-2026-65210: SMCI MBD-X12SPI: This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing…4.9 MediumN/AN/AOct 27, 2026
CVE-2026-18451: SMCI MBD-X12SPI: The HTML5 KVM-over-IP console authenticates with a token returned by the web interface3.1 LowN/AN/AOct 27, 2026
CVE-2026-18450: SMCI X12SPI: The BMC does not correctly enforce integrity and encryption requirements for IPMI commands9.8 CriticalN/AN/AOct 27, 2026
476-500 of 522616