The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-127081: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127085: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127090: Jadaptive: Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1,…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-127094: Pagelayer Team Pagelayer: Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in…7.6 High7.2 HighN/ANov 13, 2026
CVE-2026-128017: php frankenphp: FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128021: php frankenphp: FrankenPHP before 1.13.2 contains an information disclosure vulnerability that allows later clients to read earlier…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128025: php frankenphp: FrankenPHP before 1.13.0 contains a path-split interpretation conflict in splitPos in cgi.go that allows…6.5 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-128029: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting…4.7 Medium2.3 LowN/ANov 13, 2026
CVE-2026-128033: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains an information disclosure…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-128043: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains a cross-site request forgery…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-128047: OpenMage magento-lts: OpenMage magento-lts before 20.18.2 and 21.0.0-beta pre-releases before 21.0.0-beta3 generate customer…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-128052: OpenMage magento-lts: OpenMage magento-lts before 20.19.0 and 21.0.0-beta1 before 21.0.0-beta3 contains an incorrect authorization…2.7 Low5.1 MediumN/ANov 13, 2026
CVE-2026-128239: gpac: GPAC through 26.07.0 contains a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers…5.5 Medium6.8 MediumN/ANov 13, 2026
CVE-2026-128328: dokploy: Dokploy 0.28.0 before 0.31.1 contains a path traversal vulnerability that allows authenticated organization members to…5.0 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116430: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116427: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
601-625 of 532044