The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111841: Cross-Site Request Forgery (CSRF)8.8 HighN/AN/AOct 26, 2026
CVE-2026-110376: Missing Authorization4.3 MediumN/AN/AOct 26, 2026
CVE-2026-101259: Generation of Error Message Containing Sensitive Information5.3 MediumN/AN/AOct 26, 2026
CVE-2026-96581: ash-project ash: Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash allows a user of one tenant to read,…N/A7.6 HighN/AOct 26, 2026
CVE-2026-116232: Oray Pugongying X5 Pro: A weakness has been identified in Oray Pugongying X5 Pro 7.6.19.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116231: A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.19.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116230: Ndemic Creations Plague Inc Evolved: A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.36.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116229: ffxiv-teamcraft FFXIV Teamcraft: A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.313.5 Low2.0 LowN/AOct 26, 2026
CVE-2026-116228: 777genius agent-teams-ai: A vulnerability was found in 777genius agent-teams-ai up to 2.17.103.3 Low1.9 LowN/AOct 26, 2026
CVE-2026-116227: Edimax BR-6208AC: A vulnerability has been found in Edimax BR-6208AC 1.322.4 Low1.9 LowN/AOct 26, 2026
CVE-2026-116224: fr0tt benotes: A vulnerability has been found in fr0tt benotes up to 2.8.14.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116223: icret EasyImage: A flaw has been found in icret EasyImage up to 2.8.76.5 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116124: GNOME libgsf: A security vulnerability has been detected in GNOME libgsf up to 1.14.606.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-111974: Unknown GiveWP: The GiveWP WordPress plugin before 4.19.0.1 does not restrict the currency of a donation to the one the site or form…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-107900: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107899: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107898: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107897: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107896: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107895: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-107894: FUJI ELECTRIC CO., LTD. / Hakko Electronics Co., Ltd. V-SFT: V-SFT provided by FUJI ELECTRIC CO., LTD7.8 High8.4 HighN/AOct 26, 2026
CVE-2026-103381: Unknown Mintpay for WooCommerce: The Mintpay for WooCommerce WordPress plugin through 2.2.3 does not verify the authenticity of the payment callback it…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-103319: Unknown OPay Payment Gateway for WooCommerce: The OPay Payment Gateway for WooCommerce WordPress plugin through 2.5.5 does not properly verify that payment…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-103306: Unknown Online Payments with iK Pay Gateway: The Online Payments with iK Pay Gateway WordPress plugin before 3.0.4 does not properly verify the authenticity of its…5.3 MediumN/AN/AOct 26, 2026
CVE-2026-103300: Unknown Eurobank WooCommerce Payment Gateway: The Eurobank WooCommerce Payment Gateway WordPress plugin through 2.1.1 does not verify that a payment-confirmation…5.3 MediumN/AN/AOct 26, 2026
726-750 of 416032