The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-124009: Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability that allows authenticated…7.2 High8.6 HighN/ANov 12, 2026
CVE-2026-124008: Copeland XWEB EVO: XWEB EVO 5.2.3 through 5.8.8 contains an authenticated OS command injection vulnerability in the devices.lua template…7.2 High8.6 HighN/ANov 12, 2026
CVE-2026-124007: Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a pre-authentication OS command injection vulnerability that allows unauthenticated…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124006: Copeland XWEB EVO: XWEB EVO through 5.8.8 contains a predictable credential generation vulnerability that allows attackers to derive the…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124005: Copeland XWEB EVO: XWEB EVO 4.3.0 through 5.8.8 contains a weak password generation vulnerability that allows remote attackers to derive…8.1 High9.2 CriticalN/ANov 12, 2026
CVE-2026-124004: Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a hardcoded backdoor password vulnerability that allows unauthenticated remote attackers…9.8 Critical9.3 CriticalN/ANov 12, 2026
CVE-2026-124003: Copeland XWEB EVO: XWEB EVO before 5.6.2 contains a command injection vulnerability where the setuid-root Lua CGI interpreter wlua…7.8 High8.5 HighN/ANov 12, 2026
CVE-2026-124002: Copeland XWEB EVO: XWEB EVO versions 5.2.3 through before 5.7.0 contains a pre-authentication OS command injection vulnerability that…9.8 Critical9.3 CriticalN/ANov 12, 2026
CVE-2026-111456: Red Hat Red Hat Satellite 6: A missing authorization check has been found in ConsumerResource.setupOwner() function of consumer registration module…7.1 HighN/AN/ANov 12, 2026
CVE-2026-107443: Red Hat Red Hat Satellite 6: A flaw was found in Foreman7.7 HighN/AN/ANov 12, 2026
CVE-2026-107360: Red Hat Red Hat Satellite 6: A flaw was found in rubygem-safemode9.6 CriticalN/AN/ANov 12, 2026
CVE-2026-107152: Red Hat Red Hat Satellite 6: An improper authentication vulnerability has been found in the task console in the smart_proxy_dynflow package7.1 HighN/AN/ANov 12, 2026
CVE-2026-0460: AMD Bootgen: Improper authentication in Bootgen could result in the use of a fixed salt value for RSA padding instead of a randomly…N/A1.0 LowN/ANov 12, 2026
CVE-2026-0455: AMD: The Versal™ AI Edge Series Gen 2 Peripheral Protection Unit (XPPU) for the inter-processor interrupt (IPI) buffers does…N/A5.9 MediumN/ANov 12, 2026
CVE-2025-54507: AMD: Improper validation of consistency within input in AMD SEV (Secure Encrypted Virtualization) firmware could allow an…N/A5.9 MediumN/ANov 12, 2026
CVE-2025-0043: AMD Vivado Software: Incorrect directory permissions within AMD Vivado™ Lab Solutions could allow a local user-privileged attacker to…N/A7.0 HighN/ANov 12, 2026
CVE-2024-36344: AMD: Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE DrvSys could allow an attacker with local access…N/A6.9 MediumN/ANov 12, 2026
CVE-2024-21963: AMD: An out-of-bounds read vulnerability in the IOMMU could allow a malicious guest to corrupt hypervisor (HV) pages and…N/A6.0 MediumN/ANov 12, 2026
CVE-2026-127236: The OpenNMS Group: An argument injection vulnerability exists in the ad-hoc RRD graph feature of multiple versions of OpenNMS Meridian and…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-127235: The OpenNMS Group: A reflected cross-site scripting vulnerability exists in the web user interface of multiple versions of OpenNMS…6.1 MediumN/AN/ANov 12, 2026
CVE-2026-127119: AWS aws-sdk-pandas: Unverified ownership of the default cluster log location in the EMR module in AWS SDK for pandas (awswrangler) from…5.3 Medium5.9 MediumN/ANov 12, 2026
CVE-2026-126838: MongoDB Rust Driver: A MongoDB Rust Driver component that holds client-side field level encryption settings includes key management service…5.5 Medium5.7 MediumN/ANov 12, 2026
CVE-2026-126204: express-rate-limit: express-rate-limit is a basic rate-limiting middleware for Express3.7 LowN/AN/ANov 12, 2026
CVE-2026-126203: flavorjones loofah: Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri6.1 MediumN/AN/ANov 12, 2026
CVE-2026-121619: sensiolabs symfony: The Symfony FrameworkBundle framework.trusted_proxies option and the HttpFoundation Request::setTrustedProxies() method…N/A6.3 MediumN/ANov 12, 2026
76-100 of 433023