The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-126392: parse-community parse-server: Parse Server from 9.10.6-alpha.1 before 9.10.8-alpha.1 contains an information disclosure vulnerability that allows…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-126396: vllm-project vllm: vLLM from 0.24.0 before 0.31.0 contains a resource exhaustion vulnerability in the MiniMax M3 VL video processor, which…5.3 Medium6.9 MediumN/ANov 13, 2026
CVE-2026-126400: pglombardo PasswordPusher: Password Pusher from 1.49.0 before 2.17.0 contains an IP spoofing vulnerability that allows remote clients to forge the…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-126404: coder: Coder 2.28.0 before 2.29.24, 2.30.0 before 2.34.16, 2.35.0 before 2.36.11, 2.37.0 before 2.37.8, and 2.38.0 before…6.8 Medium7.6 HighN/ANov 13, 2026
CVE-2026-126408: bytecodealliance wasmtime: Wasmtime 47.0.0 before 48.0.8, 49.0.0 before 49.0.5, and 50.0.0 before 50.0.1 contains an insufficient type-check in…1.8 Low1.0 LowN/ANov 13, 2026
CVE-2026-126412: frappe hrms: Frappe HRMS 15.0.0 before 15.64.1 and 16.0.0 before 16.19.0 lacks a write permission check on a bulk record processing…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-126424: openemr: OpenEMR before 8.5.0 contains a stored cross-site scripting vulnerability that allows users with admin/superbill write…3.5 Low4.6 MediumN/ANov 13, 2026
CVE-2026-128824: Red Hat: A flaw was found in Red Hat Quay5.4 MediumN/AN/ANov 13, 2026
CVE-2026-120867: Citrix: Memory overflow in SSL/TLS/DTLS can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120866: Citrix: Memory overflow / improper handling in BGP dynamic routing can lead to unpredictable or erroneous behavior or Denial of…N/A7.7 HighN/ANov 13, 2026
CVE-2026-120865: Citrix: Memory overflow in HTTP/3 (QUIC) can lead to unpredictable or erroneous behavior or Denial of Service in Citrix…N/A8.7 HighN/ANov 13, 2026
CVE-2026-120864: Citrix: Memory overflow in ICA proxy can lead to unpredictable or erroneous behavior or Denial of Service in Citrix NetScaler…N/A9.3 CriticalN/ANov 13, 2026
CVE-2026-116453: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116438: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0 , contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116436: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116431: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Cleartext Storage of Sensitive Information…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116430: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Version 6.4.0, contain an Insufficient Verification of Data Authenticity vulnerability4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116427: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains a Missing Authorization vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116426: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…4.3 MediumN/AN/ANov 13, 2026
CVE-2026-116425: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116424: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains Unauthorized access vulnerability5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116423: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Improper Verification of Cryptographic Signature…5.4 MediumN/AN/ANov 13, 2026
CVE-2026-116422: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.3 MediumN/AN/ANov 13, 2026
CVE-2026-116421: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, Versions 6.3.0 through 6.4.0, contains an Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
CVE-2026-116420: Dell PowerScale InsightIQ: Dell PowerScale InsightIQ, versions 6.3.0 through 6.4.0, containsan Insertion of Sensitive Information into Log File…6.4 MediumN/AN/ANov 13, 2026
626-650 of 532044