The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-127207: Sendcloud: Sendcloud for WooCommerce through 1.0.41 contains a missing authorization vulnerability that allows authenticated…5.4 Medium5.3 MediumN/ANov 12, 2026
CVE-2026-127206: hookandhook Image CAPTCHA for Contact Form 7 and WPForms by HookAndHook (DSGVO/GDPR): Image CAPTCHA for Contact Form 7 and WPForms through 3.3.29 contains a CAPTCHA bypass vulnerability that allows…5.3 Medium6.9 MediumN/ANov 12, 2026
CVE-2026-86324: Red Hat: A flaw was found in Foreman’s Api::V2::SshKeysController, where the target user is resolved through…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-86323: Red Hat: A flaw was found in Foreman’s Api::V2::MailNotificationsController, where authorization checks on user-specific…4.3 MediumN/AN/ANov 12, 2026
CVE-2026-52786: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.1 HighN/AN/ANov 12, 2026
CVE-2026-47710: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.2 HighN/AN/ANov 12, 2026
CVE-2026-47259: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.2 HighN/AN/ANov 12, 2026
CVE-2026-47258: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.2 HighN/AN/ANov 12, 2026
CVE-2026-47217: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.5 HighN/AN/ANov 12, 2026
CVE-2026-46677: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems6.5 MediumN/AN/ANov 12, 2026
CVE-2026-46676: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems5.3 MediumN/AN/ANov 12, 2026
CVE-2026-45341: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems7.5 HighN/AN/ANov 12, 2026
CVE-2026-45265: bacnet-stack: BACnet Stack is a BACnet open source protocol stack C library for embedded systems8.2 HighN/AN/ANov 12, 2026
CVE-2026-124014: Copeland XWEB EVO: XWEB EVO 4.3.0 through 5.8.8 contains an unauthenticated arbitrary file write vulnerability that allows remote…9.1 Critical8.8 HighN/ANov 12, 2026
CVE-2026-124013: Copeland XWEB EVO: XWEB EVO 5.6.2 through 5.8.8 contains an authenticated OS command injection vulnerability in the api.lua…8.8 High8.7 HighN/ANov 12, 2026
CVE-2026-124012: Copeland XWEB EVO: XWEB EVO 5.6.2 through 5.8.8 contains a hardcoded credential vulnerability where the Administrator web account is…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124010: Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a command injection vulnerability that allows unauthenticated remote attackers to…9.8 Critical9.3 CriticalN/ANov 12, 2026
CVE-2026-124009: Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenticated…7.2 High8.6 HighN/ANov 12, 2026
CVE-2026-124008: Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the devices.lua template…7.2 High8.6 HighN/ANov 12, 2026
CVE-2026-124006: Copeland XWEB EVO: XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to derive the…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124005: Copeland XWEB EVO: XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to derive…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124004: Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote attackers…9.8 Critical9.3 CriticalN/ANov 12, 2026
CVE-2026-124002: Copeland XWEB EVO: XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability that…9.8 Critical9.3 CriticalN/ANov 12, 2026
CVE-2026-111456: Red Hat: A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module…7.1 HighN/AN/ANov 12, 2026
CVE-2026-107360: Red Hat: A flaw was found in rubygem-safemode9.6 CriticalN/AN/ANov 12, 2026
76-100 of 433023