The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119572: traefik: Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX…8.7 High7.0 HighN/AOct 30, 2026
CVE-2026-119571: parse-community parse-server: Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates…3.7 Low6.3 MediumN/AOct 30, 2026
CVE-2026-119570: parse-community parse-server: Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119569: parse-community parse-server: Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because…5.3 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-118986: CallBackery versions before 0.62.0 for Perl allow session cookie forgery via a signing secret generated with rand()N/AN/AN/AOct 30, 2026
CVE-2026-118987: CallBackery versions before 0.62.0 for Perl accept session cookies of any age sent in the X-Session-Cookie headerN/AN/AN/AOct 30, 2026
CVE-2026-119591: SQLite: SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to…5.5 Medium6.8 MediumN/AOct 30, 2026
CVE-2026-119586: SQLite: SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119568: vsftpd: vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated…7.4 High9.1 CriticalN/AOct 30, 2026
CVE-2026-119567: vsftpd: vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119566: prometheus: Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google…4.8 Medium6.3 MediumN/AOct 30, 2026
CVE-2026-119565: Plausible Plausible Analytics: Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119564: Plausible Plausible Analytics: Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site…5.3 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119563: phpMyAdmin: phpMyAdmin through 5.2.3 contains a stored cross-site scripting vulnerability that allows database users with CREATE…5.4 Medium5.1 MediumN/AOct 30, 2026
CVE-2026-119562: phpMyAdmin: phpMyAdmin through 5.2.3 contains an sql injection vulnerability that allows authenticated users to inject SQL by…4.2 Medium2.3 LowN/AOct 30, 2026
CVE-2026-119561: phpMyAdmin: phpMyAdmin through 5.2.3 contains an authentication bypass vulnerability in…6.8 Medium7.6 HighN/AOct 30, 2026
CVE-2026-119560: opnsense core: OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append…5.9 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119559: litespeedtech openlitespeed: OpenLiteSpeed through 1.9.4 contains an authentication bypass vulnerability that allows unauthenticated remote…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119558: OpenCart: OpenCart through 4.1.0.4 contains a business logic vulnerability that allows logged-in customers to place unpaid…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119557: n8n-io n8n: n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119556: Moodle Project moodle: Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119555: Moodle Project moodle: Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain an…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119554: Moodle Project moodle: Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contain an sql…5.9 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119553: Moodle Project moodle: Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path…6.5 Medium7.1 HighN/AOct 30, 2026
CVE-2026-119552: louislam uptime-kuma: Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows…4.8 Medium6.3 MediumN/AOct 30, 2026
51-75 of 418435