The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2023-54423: OpenMage magento-lts: OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG…7.5 High8.3 HighN/ANov 13, 2026
CVE-2026-126317: frappe hrms: Frappe HRMS from 16.0.0 before 16.20.1 contains a missing authorization vulnerability that allows authenticated users…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-126396: vllm-project vllm: vLLM from 0.24.0 before 0.31.0 contains a resource exhaustion vulnerability in the MiniMax M3 VL video processor, which…5.3 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-126416: openemr: OpenEMR before 8.5.0 contains an improper authorization vulnerability in patient_tracker_status.php that allows…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-118587: blubrry PowerPress Podcasting plugin by Blubrry: The PowerPress Podcasting plugin by Blubrry plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…5.4 MediumN/AN/ANov 13, 2026
CVE-2026-124218: addonsorg Drag and Drop File Upload for Elementor Forms: The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to arbitrary file deletion due to…8.2 HighN/AN/ANov 13, 2026
CVE-2026-120688: scheeeli EZ SQL Reports Shortcode Widget and DB Backup: The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…7.2 HighN/AN/ANov 13, 2026
CVE-2026-115871: renehermi: The WP STAGING – Backups & Restore, Migration & Clone Plugin – Cloud Backups, Scheduled Backups plugin for WordPress is…2.7 LowN/AN/ANov 13, 2026
CVE-2026-128028: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…4.7 Medium2.3 LowN/ANov 13, 2026
CVE-2026-128032: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 accepts the free (No Payment Information…4.4 Medium5.9 MediumN/ANov 13, 2026
CVE-2026-128042: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a race condition in shopping cart…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128046: OpenMage magento-lts: OpenMage magento-lts 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an unrestricted file upload…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-128051: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…3.5 Low4.8 MediumN/ANov 13, 2026
CVE-2026-128331: miniflux: Miniflux before 2.3.5 contains an unverified password change vulnerability that allows holders of a signed-in session…5.3 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-128335: Contao: Contao 4.6.0 before 5.3.54, 5.4.0-RC1 before 5.7.17, and 6.0.0-RC1 before 6.0.6 fails to invalidate existing user…3.7 Low2.1 LowN/ANov 13, 2026
CVE-2026-116418: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Incorrect Authorization vulnerability7.5 HighN/AN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
501-525 of 532044