The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116062: SourceCodester Performance Indicator System: A security flaw has been discovered in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-116061: SourceCodester Performance Indicator System: A vulnerability was identified in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-116060: SourceCodester Performance Indicator System: A vulnerability was determined in SourceCodester Performance Indicator System 1.07.3 High5.5 MediumN/AOct 25, 2026
CVE-2026-115825: Memory Allocation with Excessive Size ValueN/AN/AN/AOct 25, 2026
CVE-2026-115824: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 25, 2026
CVE-2026-115823: Inconsistent Interpretation of HTTP RequestsN/AN/AN/AOct 25, 2026
CVE-2026-115822: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 25, 2026
CVE-2026-115817: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 25, 2026
CVE-2026-116058: Alfresco Activiti: A vulnerability was found in Alfresco Activiti up to 7.21.0-rc.6926.3 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116057: KodCloud KodExplorer: A vulnerability has been found in KodCloud KodExplorer up to 4.556.3 Medium2.1 LowN/AOct 25, 2026
CVE-2026-116056: KodCloud KodExplorer: A flaw has been found in KodCloud KodExplorer up to 4.566.3 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116055: SourceCodester Performance Indicator System: A vulnerability was detected in SourceCodester Performance Indicator System 1.06.3 Medium2.1 LowN/AOct 25, 2026
CVE-2026-116054: n/a SH3: A security vulnerability has been detected in SH32.2 Low1.2 LowN/AOct 25, 2026
CVE-2026-116211: yeswiki: YesWiki 4.5.0 before 4.7.0 contains an SQL injection vulnerability in PageManager::save(), where the date_maj_fiche…8.2 High8.8 HighN/AOct 25, 2026
CVE-2026-116208: yeswiki: YesWiki from 4.6.2 before 4.7.0 contains a missing authorization vulnerability in ActivityPubService::syncActorPosts…8.1 High7.2 HighN/AOct 25, 2026
CVE-2026-116207: yeswiki: YesWiki 4.6.0 before 4.7.0 and 5.0.0-alpha1 before 5.0.0-alpha4 contains an unauthenticated SQL injection vulnerability…9.1 Critical8.8 HighN/AOct 25, 2026
CVE-2026-116206: yeswiki: YesWiki from 4.2.0 before 4.7.0 contains a stored cross-site scripting vulnerability that allows authenticated users to…6.4 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116205: yeswiki: YesWiki before 4.7.0 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers…5.3 Medium6.9 MediumN/AOct 25, 2026
CVE-2026-116204: yeswiki: YesWiki before 4.7.0 contains a cross-site request forgery vulnerability in the despam action…8.1 High7.2 HighN/AOct 25, 2026
CVE-2026-116203: yeswiki: YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in the filtertags action, which echoes…6.1 Medium5.3 MediumN/AOct 25, 2026
CVE-2026-116202: yeswiki: YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability that allows low-privilege authenticated users…5.4 Medium5.1 MediumN/AOct 25, 2026
CVE-2026-116201: grokability snipe-it: Snipe-IT before 8.5.0 contains a SAML assertion replay vulnerability that allows attackers to reuse captured assertions…8.8 High8.7 HighN/AOct 25, 2026
CVE-2026-116200: grokability snipe-it: Snipe-IT before 8.6.3 ignores the ldap_start_tls() return value in Ldap::connectToLdap(), allowing on-path attackers to…5.9 Medium8.2 HighN/AOct 25, 2026
CVE-2026-116199: grokability snipe-it: Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoogleCallback, which logs in…8.1 High9.2 CriticalN/AOct 25, 2026
CVE-2026-116198: grokability snipe-it: Snipe-IT before 8.7.0 contains a missing encryption vulnerability in Api\AssetsController::store that writes plaintext…4.3 Medium5.3 MediumN/AOct 25, 2026
476-500 of 416032