The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-48164: CollaboraOnline online: Collabora Online is a collaborative online office suite based on LibreOffice technology4.7 MediumN/AN/AOct 30, 2026
CVE-2026-45145: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system7.5 HighN/AN/AOct 30, 2026
CVE-2026-45141: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system6.5 MediumN/AN/AOct 30, 2026
CVE-2026-119665: MGdaasLab WHartTest: WHartTest 2.2.0 through 2.8.1 contains a missing authorization vulnerability in ScheduledTaskViewSet and…6.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119661: star7th ShowDoc: ShowDoc through 3.9.5 contains an authorization bypass vulnerability in the api/paramDescLib/deleteEntries endpoint…4.2 Medium2.3 LowN/AOct 30, 2026
CVE-2026-119657: zyx0814 FilePress: FilePress through 3.0.1 contains a missing authorization vulnerability in dzz/pichome/library that allows authenticated…5.0 Medium2.3 LowN/AOct 30, 2026
CVE-2026-119653: admpub nging: Nging through 5.3.5 contains an information disclosure vulnerability that allows any authenticated backend user to list…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119649: OrchardCMS Orchard: Orchard CMS 1.10.3 through 1.11 contains an improper authorization vulnerability in…7.1 High7.1 HighN/AOct 30, 2026
CVE-2026-119645: easysoft zentaopms: ZenTao PMS through 22.6 contains a missing authorization vulnerability in doc::ajaxGetDoc() that allows authenticated…6.5 Medium7.1 HighN/AOct 30, 2026
CVE-2026-119370: Liquid Web / StellarWP The Events Calendar: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…6.5 MediumN/AN/AOct 30, 2026
CVE-2026-116860: Arraytics Timetics: Missing Authorization vulnerability in Arraytics Timetics timetics allows Exploiting Incorrectly Configured Access…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-110799: givanz Vvveb: Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores9.8 CriticalN/AN/AOct 30, 2026
CVE-2010-20125: DedeCMS: DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated…7.5 High8.7 HighN/AOct 30, 2026
CVE-2026-118238: Tenda W18E: The Tenda W18E web management server is vulnerable to OS command injection via the "diagnose" packet-capture feature…N/AN/AN/AOct 30, 2026
CVE-2026-119368: Liquid Web / StellarWP The Events Calendar: Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Exploiting…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-119482: Crocoblock JetFormBuilder: Missing Authorization vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Exploiting Incorrectly…5.3 MediumN/AN/AOct 30, 2026
CVE-2026-46499: CollaboraOnline online: Collabora Online is a collaborative online office suite based on LibreOffice technology4.3 MediumN/AN/AOct 30, 2026
CVE-2026-93327: Google Cloud Application Integration: A Deserialization of Untrusted Data vulnerability in the SubWorkflow task in Google Cloud Application Integration…N/A9.4 CriticalN/AOct 30, 2026
CVE-2026-61626: libass: libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle formatN/A7.3 HighN/AOct 30, 2026
CVE-2026-61738: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs10.0 CriticalN/AN/AOct 30, 2026
CVE-2026-44344: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system6.6 MediumN/AN/AOct 30, 2026
CVE-2026-45144: chamilo chamilo-lms: Chamilo LMS is an open-source learning management system8.9 HighN/AN/AOct 30, 2026
CVE-2026-61729: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs9.4 CriticalN/AN/AOct 30, 2026
CVE-2015-20130: Netsweeper: Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in…6.1 Medium5.1 MediumN/AOct 30, 2026
CVE-2026-61728: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs9.9 CriticalN/AN/AOct 30, 2026
76-100 of 413289