The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-108565: Revive Adserver: A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier…4.7 MediumN/AN/ANov 11, 2026
CVE-2026-108564: Revive Adserver: A reflected cross-site scripting vulnerability in the invocation-tag generation interface of Revive Adserver 6.0.8 and…4.7 MediumN/AN/ANov 11, 2026
CVE-2026-108563: Revive Adserver: Spreadsheet formula injection in conversion-tracking report exports in Revive Adserver 6.0.8 and earlier allows an…4.7 MediumN/AN/ANov 11, 2026
CVE-2026-108562: Revive Adserver: A stored cross-site scripting vulnerability in maintenance-appendcode-check.php in Revive Adserver 6.0.8 and earlier…5.4 MediumN/AN/ANov 11, 2026
CVE-2026-108561: Revive Adserver: A stored cross-site scripting vulnerability in the report date-selection controls of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108560: Revive Adserver: A reflected cross-site scripting vulnerability in updates-history.php in Revive Adserver 6.0.8 and earlier allows an…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108559: Revive Adserver: A reflected cross-site scripting vulnerability in the iframe invocation options of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-108558: Revive Adserver: A reflected cross-site scripting vulnerability in the conversion-statistics pages of Revive Adserver 6.0.8 and earlier…6.1 MediumN/AN/ANov 11, 2026
CVE-2026-107662: Revive Adserver: Blind SQL injection in Revive Adserver 6.0.8 and earlier allows an authenticated manager restricted to one agency to…8.8 HighN/AN/ANov 11, 2026
CVE-2026-107247: Revive Adserver: An authorization bypass in Revive Adserver 6.0.0 through 6.0.8 allows an authenticated manager restricted to one agency…8.1 HighN/AN/ANov 11, 2026
CVE-2026-106156: Progress Software Telerik UI for ASP.NET Core: In Progress® Telerik® UI for ASP.NET Core versions `2015.1.318` through `2026.3.811`, repeated server-side aggregation…8.6 HighN/AN/ANov 11, 2026
CVE-2026-106152: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an external control of a system configuration…8.8 HighN/AN/ANov 11, 2026
CVE-2026-106137: Progress Software Telerik UI for ASP.NET MVC: In affected versions of Progress® Telerik® UI for ASP.NET MVC `2012.2.710` through `2026.3.811`, ClassFactory updates a…8.6 HighN/AN/ANov 11, 2026
CVE-2026-106133: Progress Software Telerik Report Server: In Progress® Telerik® Report Server prior to version 12.3.26.1110, an incorrect authorization vulnerability in the Web…6.3 MediumN/AN/ANov 11, 2026
CVE-2026-123864: nodejs node: A re-entrancy flaw in Node.js HTTPS lets an unauthenticated client read memory belonging to other connections,…8.1 HighN/AN/ANov 11, 2026
CVE-2026-123863: nodejs node: A reachable assertion in Node.js HTTP/2 session teardown lets any unauthenticated client abort the server, over both…8.2 HighN/AN/ANov 11, 2026
CVE-2026-57500: opencloud-eu reva: REVA is an interoperability platform6.3 MediumN/AN/ANov 11, 2026
CVE-2026-91874: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-123862: nodejs node: An uncatchable exception in the Node.js zlib streaming API lets a peer crash a process by disconnecting while data is…2.9 LowN/AN/ANov 11, 2026
CVE-2026-123829: nodejs node: A Permission Model bypass in Node.js recursive file watching discloses the names of files and directories the process…2.5 LowN/AN/ANov 11, 2026
CVE-2026-126772: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains an improper attribution vulnerability that allows authenticated users to post…4.3 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126771: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to…5.4 Medium5.1 MediumN/ANov 11, 2026
CVE-2026-126770: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a server-side request forgery vulnerability that allows authenticated users to make…5.0 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126769: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains a missing authentication vulnerability that allows unauthenticated remote attackers…7.5 High8.7 HighN/ANov 11, 2026
CVE-2026-126768: OpsTree Solutions REMS: OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 CriticalN/ANov 11, 2026
51-75 of 511254