The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118553: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118552: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118551: Drupal AI (Artificial Intelligence): Insecure Storage of Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Retrieve Embedded…N/AN/AN/AOct 30, 2026
CVE-2026-118550: Drupal AI (Artificial Intelligence): Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows…N/AN/AN/AOct 30, 2026
CVE-2026-118549: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118548: Drupal AI (Artificial Intelligence): Incorrect Authorization vulnerability in Drupal AI (Artificial Intelligence) allows Resource InjectionN/AN/AN/AOct 30, 2026
CVE-2026-118546: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118545: Drupal AI (Artificial Intelligence): Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal AI…N/AN/AN/AOct 30, 2026
CVE-2026-118544: Drupal Commerce Core: Exposure of Sensitive Information Through Data Queries vulnerability in Drupal Commerce Core allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118543: Drupal Commerce Core: Cross-Site Request Forgery (CSRF) vulnerability in Drupal Commerce Core allows Cross Site Request ForgeryN/AN/AN/AOct 30, 2026
CVE-2026-118542: Drupal Commerce Core: Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118541: Drupal Commerce Core: Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118540: Drupal Commerce Core: Incorrect Authorization vulnerability in Drupal Commerce Core allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-118539: Drupal Commerce Core: Missing Authorization vulnerability in Drupal Commerce Core allows Forceful Browsing6.5 MediumN/AN/AOct 30, 2026
CVE-2026-114573: Drupal Monster Menus: Improperly Controlled Modification of Dynamically-Determined Object Attributes vulnerability in Drupal Monster Menus…N/AN/AN/AOct 30, 2026
CVE-2026-114572: Drupal Domain Login Restrict: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Domain Login Restrict allows…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-114571: Drupal Rabbit Hole: Incorrect Authorization vulnerability in Drupal Rabbit Hole allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114555: Drupal Data field: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Data field…3.5 LowN/AN/AOct 30, 2026
CVE-2026-114554: Drupal AI File to Text: Incorrect Authorization vulnerability in Drupal AI File to Text allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114553: Drupal Frontend Editing: Incorrect Authorization vulnerability in Drupal Frontend Editing allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114548: Drupal ImageAPI Optimize WebP: Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows…N/AN/AN/AOct 30, 2026
CVE-2026-114547: Drupal TinyPNG: Missing Authorization vulnerability in Drupal TinyPNG allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114546: Drupal Media Alias Display: Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting…N/AN/AN/AOct 30, 2026
CVE-2026-114545: Drupal Fullcalendar View: Incorrect Authorization vulnerability in Drupal Fullcalendar View allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114544: Drupal Media Bulk Upload: Incorrect Authorization vulnerability in Drupal Media Bulk Upload allows Forceful BrowsingN/AN/AN/AOct 30, 2026
551-575 of 418318