The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126428: openemr: OpenEMR before 8.5.0 contains a remote code execution vulnerability that allows authenticated billing users to store…7.5 High7.7 HighN/ANov 13, 2026
CVE-2026-126432: openemr: OpenEMR before 8.5.0 contains an improper authorization vulnerability in interface/orders/list_reports.php that allows…5.9 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-126436: openemr: OpenEMR before 8.5.0 contains an authorization bypass vulnerability that allows OAuth2 clients to use unregistered…7.5 High8.7 HighN/ANov 13, 2026
CVE-2026-126440: openemr: OpenEMR before 8.5.0 contains a missing authorization flaw in the Care Coordination CCDA and CCR import controllers,…5.9 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-126444: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability in the Ensora eRx integration that allows…5.9 Medium6.0 MediumN/ANov 13, 2026
CVE-2026-122227: mervb1 Easy Property Listings: The Easy Property Listings plugin for WordPress is vulnerable to generic SQL Injection via the 'post_type' parameter in…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-120573: etruel WPeMatico RSS Feed Fetcher: The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-118191: smub: The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to arbitrary file…8.1 HighN/AN/ANov 13, 2026
CVE-2026-126448: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability that allows authenticated users lacking…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-125948: wpzoom Recipe Card Blocks Lite: The Recipe Card Blocks Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'steps[].text'…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-116615: marketingfire Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets: The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is…8.8 HighN/AN/ANov 13, 2026
CVE-2026-126452: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability in diagnosis_full.php that allows authenticated…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-126456: openemr: OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability in the Fee Sheet notecodes field, which is…5.4 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-126461: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability in library/ajax/user_settings.php that lets any…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-126465: openemr: OpenEMR before 8.5.0 contains an SQL injection vulnerability in the patient portal api/onsiteactivityviews endpoint…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-126469: openemr: OpenEMR before 8.5.0 contains a missing authorization vulnerability in several custom/ scripts that rely only on…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
601-625 of 532044