The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-125926: AWS mcp-gateway-registry: Server-side request forgery (SSRF) in the server registration and update API in Amazon mcp-gateway-registry before…8.5 High6.3 MediumN/ANov 11, 2026
CVE-2026-103980: 3xpyth0n ideon: ideon is a self-hosted visual workspaceN/A7.1 HighN/ANov 11, 2026
CVE-2026-100307: AWS mcp-gateway-registry: Missing authorization in the external management API in Amazon mcp-gateway-registry 1.0.9 through 1.24.7 might allow an…8.8 High8.7 HighN/ANov 11, 2026
CVE-2026-91151: Red Hat: A flaw was found in Cockpit7.3 HighN/AN/ANov 11, 2026
CVE-2026-126815: XauenDevs Lagarto Chivato: Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote…8.1 HighN/AN/ANov 11, 2026
CVE-2026-126784: XauenDevs Lagarto Chivato: Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-122095: AsiaInfo BSS Platform: AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload…7.6 HighN/AN/ANov 11, 2026
CVE-2026-0331: Palo Alto Networks: An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote…N/A6.6 MediumN/ANov 11, 2026
CVE-2026-0330: Palo Alto Networks: A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated…N/A6.1 MediumN/ANov 11, 2026
CVE-2026-0329: Palo Alto Networks: A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network…N/A4.6 MediumN/ANov 11, 2026
CVE-2026-0328: Palo Alto Networks: Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software…N/A2.7 LowN/ANov 11, 2026
CVE-2026-0327: Palo Alto Networks: A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…N/A2.3 LowN/ANov 11, 2026
CVE-2026-0326: Palo Alto Networks: A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt…N/A1.7 LowN/ANov 11, 2026
CVE-2026-0325: Palo Alto Networks: An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…N/A1.3 LowN/ANov 11, 2026
CVE-2026-0324: OPSWAT MetaDefender Endpoint Security SDK: An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto…N/A5.9 MediumN/ANov 11, 2026
CVE-2026-0323: Palo Alto Networks Checkov by Prisma Cloud: A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…N/A1.1 LowN/ANov 11, 2026
CVE-2026-91892: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of…3.7 LowN/AN/ANov 11, 2026
CVE-2026-91891: Dell Terraform Provider for PowerStore: Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive…7.5 HighN/AN/ANov 11, 2026
CVE-2026-91880: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation…8.9 HighN/AN/ANov 11, 2026
CVE-2026-91878: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91877: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91876: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91875: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91874: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91873: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
576-600 of 433023