The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-126051: nodejs node: A deferred-callback use-after-destroy in Node.js TLS server handshake handling allows a remote, unauthenticated…7.5 HighN/AN/ANov 11, 2026
CVE-2026-123877: nodejs node: A certificate validation bypass in Node.js https.Agent lets a cached TLS session authenticated under one CA policy be…6.8 MediumN/AN/ANov 11, 2026
CVE-2026-123875: nodejs node: A NULL pointer dereference in Node.js HTTP/2 lets an unauthenticated client crash the server, over both TLS and…5.9 MediumN/AN/ANov 11, 2026
CVE-2026-123874: nodejs node: A use-after-free in Node.js HTTP/2 lets an unauthenticated client corrupt server memory, over both TLS and cleartext,…7.5 HighN/AN/ANov 11, 2026
CVE-2026-123872: nodejs node: A client certificate authentication bypass in Node.js TLS lets a client change the servername during TLS 1.2…8.1 HighN/AN/ANov 11, 2026
CVE-2026-123871: nodejs node: Node.js discloses proxy credentials in ERR_PROXY_INVALID_CONFIG error messages6.2 MediumN/AN/ANov 11, 2026
CVE-2026-123868: nodejs node: An unauthenticated HTTP/2 client can exhaust Node.js server memory because inbound DATA queued on an undrained stream…5.9 MediumN/AN/ANov 11, 2026
CVE-2026-123867: nodejs node: A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a…4.2 MediumN/AN/ANov 11, 2026
CVE-2026-123866: nodejs node: A use-after-free in Node.js HTTP/2 stream teardown can leak response memory, including the contents of other…7.5 HighN/AN/ANov 11, 2026
CVE-2026-123865: nodejs node: An unauthenticated HTTP/2 client can permanently leak Node.js server memory and file descriptors7.5 HighN/AN/ANov 11, 2026
CVE-2026-123864: nodejs node: A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections,…8.1 HighN/AN/ANov 11, 2026
CVE-2026-123863: nodejs node: A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both…8.2 HighN/AN/ANov 11, 2026
CVE-2026-123862: nodejs node: An uncatchable exception in the Node.js zlib streaming API lets a peer crash a process by disconnecting while data is…2.9 LowN/AN/ANov 11, 2026
CVE-2026-123829: nodejs node: A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process…2.5 LowN/AN/ANov 11, 2026
CVE-2026-123828: nodejs node: A one-byte heap buffer overflow in Node.js HTTP/2 Alt-Svc handling lets a remote, unauthenticated attacker corrupt…5.9 MediumN/AN/ANov 11, 2026
CVE-2026-123747: OpenPrinting, Red Hat: A flaw was found in pappl-retrofit7.3 HighN/AN/ANov 11, 2026
CVE-2026-119055: Schneider Electric EcoStruxure™ Power Build Rapsody: CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could…N/A4.6 MediumN/ANov 11, 2026
CVE-2026-108472: Red Hat: A flaw was found in the xfs_admin utility in xfsprogs7.8 HighN/AN/ANov 11, 2026
CVE-2026-91890: Dell Ansible Storage for Unity: Dell Ansible Storage for Unity , versions prior to 1.2.13 contains an Improper Certificate Validation vulnerability in…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91879: Dell: Dell Terraform for ObjectScale and Powerstore, versions prior to 1.1.1 (ObjectScale) and versions 1.2.1 through 1.3.0…8.8 HighN/AN/ANov 11, 2026
CVE-2026-91872: Dell Ansible Storage for PowerStore: Dell Ansible Storage for PowerStore, versions prior to 3.9.0,contains an Insertion of Sensitive Information into Log…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91871: Dell Ansible Storage for PowerStore: Dell Ansible Storage for PowerStore, versions prior to 3.9.0, contains an Improper Certificate Validation vulnerability…7.4 HighN/AN/ANov 11, 2026
CVE-2026-91870: Dell Ansible Storage for PowerFlex: Dell Ansible Storage for PowerFlex, versions prior to 3.2.0, contains an Improper Certificate Validation vulnerability…7.4 HighN/AN/ANov 11, 2026
CVE-2026-86364: Dell Live Optics Collector: Dell Live Optics Collector, versions prior to 27.3.8.317 contains a Use of Insufficiently Random Values vulnerability4.7 MediumN/AN/ANov 11, 2026
CVE-2026-86363: Dell Live Optics Collector: Dell Live Optics Collector, versions prior to 27.3.13.330 contains a Generation of Predictable IV with CBC Mode…5.5 MediumN/AN/ANov 11, 2026
51-75 of 511254