The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-128018: php frankenphp: FrankenPHP before 1.13.4 contains a denial of service vulnerability in worker mode where frankenphp_handle_request()…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128017: php frankenphp: FrankenPHP before 1.13.4 contains a double free vulnerability in worker mode that frees…3.7 Low6.3 MediumN/ANov 13, 2026
CVE-2026-128016: php frankenphp: FrankenPHP before 1.13.4 contains a use-after-free vulnerability in worker mode that frees internal streams of…6.5 Medium8.3 HighN/ANov 13, 2026
CVE-2026-128015: php frankenphp: FrankenPHP before 1.13.4 contains a use-after-free vulnerability that leaves a dangling pointer to a freed environment…6.5 Medium8.3 HighN/ANov 13, 2026
CVE-2026-128014: php frankenphp: FrankenPHP standalone static binaries 1.8.0 before 1.13.2 bundle the PHP brotli extension statically linked with Brotli…8.1 High9.2 CriticalN/ANov 13, 2026
CVE-2026-127094: Pagelayer Team Pagelayer: Pagelayer 2.1.7 before 2.2.1 contains a missing authorization vulnerability in Abilities API abilities registered in…7.6 High7.2 HighN/ANov 13, 2026
CVE-2026-127093: rustrak: Rustrak before 0.26.0 contains a server-side request forgery vulnerability that allows users with integrations update…5.5 Medium5.1 MediumN/ANov 13, 2026
CVE-2026-127092: build-admin BuildAdmin: BuildAdmin 1.0.1 through 2.3.9 contains a stored cross-site scripting vulnerability that allows unauthenticated…6.1 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127091: Jadaptive: Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1,…6.8 Medium7.6 HighN/ANov 13, 2026
CVE-2026-127090: Jadaptive: Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1,…8.8 High8.7 HighN/ANov 13, 2026
CVE-2026-127088: Bubka 2FAuth: 2FAuth before 9.0.1 contains a weak password recovery vulnerability that allows unauthenticated attackers to poison…8.1 High8.6 HighN/ANov 13, 2026
CVE-2026-127087: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to revoke other…3.1 Low2.3 LowN/ANov 13, 2026
CVE-2026-127086: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to take over other…6.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127085: IgnisDa ryot: Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127084: teableio teable: Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated…7.3 High8.5 HighN/ANov 13, 2026
CVE-2026-127083: huginn: Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because…6.4 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127082: huginn: Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to…7.7 High8.3 HighN/ANov 13, 2026
CVE-2026-127081: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link…4.3 Medium5.3 MediumN/ANov 13, 2026
CVE-2026-127080: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy users…9.9 Critical9.4 CriticalN/ANov 13, 2026
CVE-2026-127079: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticated…7.4 High9.1 CriticalN/ANov 13, 2026
CVE-2026-127078: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-127077: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to…7.1 High7.1 HighN/ANov 13, 2026
CVE-2026-127076: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a broken access control vulnerability that allows authenticated users to list…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-127075: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users to read…6.5 Medium7.1 HighN/ANov 13, 2026
CVE-2026-127074: OpsTree Solutions BuildPiper: OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with build…4.3 Medium5.3 MediumN/ANov 13, 2026
76-100 of 423507