The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-128025: php frankenphp: FrankenPHP before 1.13.0 contains a path-split interpretation conflict in splitPos in cgi.go that allows…6.5 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-128029: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…4.7 Medium2.3 LowN/ANov 13, 2026
CVE-2026-128033: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-128043: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-128047: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-128052: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization…2.7 Low5.1 MediumN/ANov 13, 2026
CVE-2026-128239: gpac: GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers…5.5 Medium6.8 MediumN/ANov 13, 2026
CVE-2026-128328: dokploy: Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to…5.0 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116430: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116427: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116426: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116425: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116424: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116423: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature…5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116422: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.3 MediumN/AN/ANov 13, 2026
CVE-2026-116421: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
576-600 of 532044