The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119339: tesseract-ocr tesseract: Tesseract is an open source OCR engine5.5 MediumN/AN/AOct 30, 2026
CVE-2026-58412: filecoin-project filecoin-pin: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service8.2 HighN/AN/AOct 30, 2026
CVE-2026-119338: tesseract-ocr tesseract: Tesseract is an open source OCR engineN/A6.9 MediumN/AOct 30, 2026
CVE-2026-94175: Saad Iqbal All In One Login: Unauthenticated Cross Site Scripting (XSS) in All In One Login <= 2.4.1 versions.7.1 HighN/AN/AOct 30, 2026
CVE-2026-90888: LeadSnap: Unauthenticated PHP Object Injection in LeadSnap <= 1.25 versions.9.8 CriticalN/AN/AOct 30, 2026
CVE-2026-7005: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a browser-mediated cross-origin request forgery vulnerability that allows…6.1 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-7004: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a pre-authentication reflected cross-site scripting vulnerability that…6.1 Medium5.1 MediumN/AOct 30, 2026
CVE-2026-7003: WIT SynApps Runtime: WIT SynApps Runtime through 1.4.11 contains a hardcoded credentials vulnerability that allows unauthenticated attackers…5.3 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-78527: GS Plugins GS Testimonial Slider: Contributor PHP Object Injection in GS Testimonial Slider <= 3.3.10 versions.8.8 HighN/AN/AOct 30, 2026
CVE-2026-73322: Apache Software Foundation Apache Pinot: Incorrect Authorization vulnerability in the single-stage query engine of Apache PinotN/AN/AN/AOct 30, 2026
CVE-2026-73186: ShortPixel Enable Media Replace: Subscriber PHP Object Injection in Enable Media Replace <= 4.2.2 versions.8.8 HighN/AN/AOct 30, 2026
CVE-2026-66026: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 30, 2026
CVE-2026-66025: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.N/AN/AN/AOct 30, 2026
CVE-2026-62331: mtzanidakis praktor: praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission…8.2 HighN/AN/AOct 30, 2026
CVE-2026-62303: pistacheio pistache: Pistache is a high-performance REST toolkit written in C++5.9 MediumN/AN/AOct 30, 2026
CVE-2026-62298: mouse07410 asn1c: mouse07410/asn1c is an ASN.1 compilerN/A0.0 NoneN/AOct 30, 2026
CVE-2026-62264: SylphxAI pdf-reader-mcp: PDF Reader MCP is a Model Context Protocol server for reading PDF documents7.5 HighN/AN/AOct 30, 2026
CVE-2026-62162: cardano-scaling hydra: Hydra is a layer-two scalability solution for CardanoN/A8.2 HighN/AOct 30, 2026
CVE-2026-62160: daptin: Daptin is a GraphQL/JSON-API headless CMSN/A8.7 HighN/AOct 30, 2026
CVE-2026-62122: Arraytics Booktics: Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Configured Access…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62121: Unlimited Elements: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-62057: Fahim Reza Divi Contact Form 7: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Fahim Reza Divi Contact…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62056: WP ManageNinja LLC Fluent CRM: Missing Authorization vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Exploiting Incorrectly…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-62047: Liquid Web / StellarWP Event Tickets: Missing Authorization vulnerability in Liquid Web / StellarWP Event Tickets event-tickets allows Exploiting Incorrectly…4.3 MediumN/AN/AOct 30, 2026
CVE-2026-62023: Unlimited Elements: Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons,…4.3 MediumN/AN/AOct 30, 2026
76-100 of 418318