The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-108562: Revive Adserver: A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier…5.4 MediumN/AN/ANov 11, 2026
CVE-2026-108561: Revive Adserver: A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108560: Revive Adserver: A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108559: Revive Adserver: A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108558: Revive Adserver: A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-107662: Revive Adserver: Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to…8.8 HighN/AN/ANov 11, 2026
CVE-2026-107247: Revive Adserver: An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency…8.1 HighN/AN/ANov 11, 2026
CVE-2026-106156: Progress Software Telerik UI for ASP.NET Core: In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation…8.6 HighN/AN/ANov 11, 2026
CVE-2026-106152: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration…8.8 HighN/AN/ANov 11, 2026
CVE-2026-106137: Progress Software Telerik UI for ASP.NET MVC: In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a…8.6 HighN/AN/ANov 11, 2026
CVE-2026-106133: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web…6.3 MediumN/AN/ANov 11, 2026
CVE-2026-57500: opencloud-eu reva: REVA is an interoperability platform6.3 MediumN/AN/ANov 11, 2026
CVE-2026-126771: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to…5.4 Medium5.1 MediumN/ANov 11, 2026
CVE-2026-126767: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a prompt injection vulnerability that allows authenticated users to disclose the…4.3 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-64861: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams4.3 MediumN/AN/ANov 11, 2026
CVE-2026-91891: Dell Terraform Provider for PowerStore: Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive…7.5 HighN/AN/ANov 11, 2026
CVE-2026-91872: Dell Ansible Storage for PowerStore: Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-61619: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…N/A8.8 HighN/ANov 11, 2026
CVE-2026-89061: Lenovo PC Manager: During an internal security assessment, a potential vulnerability was discovered in Lenovo PC Manager, distributed…7.8 High8.5 HighN/ANov 11, 2026
CVE-2026-77882: Lenovo System Update: A deserialization of untrusted data vulnerability was discovered in Lenovo System Update that could allow a local…7.8 High8.5 HighN/ANov 11, 2026
CVE-2026-77873: Lenovo System Update: An improper permissions vulnerability was reported in Lenovo System Update that could allow a local authenticated user…7.3 High7.0 HighN/ANov 11, 2026
CVE-2026-126724: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an undocumented UID-0 backdoor account (dg) with a firmware-wide default password…N/AN/AN/ANov 11, 2026
CVE-2026-126723: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an authenticated command injection vulnerability in the LuCI white_list RPC handler…N/AN/AN/ANov 11, 2026
CVE-2026-126722: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an undocumented telnet backdoor daemon (/usr/bin/telnetd_startup) that, upon…N/AN/AN/ANov 11, 2026
CVE-2026-126720: Rooxis Rooxis RXR-12: Rooxis RXR-12 Wi-Fi router contains an unauthenticated remote code execution vulnerability in /usr/bin/cloud_manage,…N/AN/AN/ANov 11, 2026
601-625 of 433023