The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-64678: nitrite nitrite-java: NOsql Object (NO2 a.k.a Nitrite) database is an open source nosql embedded document store9.8 CriticalN/AN/ANov 11, 2026
CVE-2026-64671: walinejs waline: Waline is a comment system with backend support7.2 HighN/AN/ANov 11, 2026
CVE-2026-64670: walinejs waline: Waline is a comment system with backend support9.3 CriticalN/AN/ANov 11, 2026
CVE-2026-64669: mcdope pam_usb: pam_usb provides hardware authentication for Linux using removable media7.4 HighN/AN/ANov 11, 2026
CVE-2026-64668: mcdope pam_usb: pam_usb provides hardware authentication for Linux using removable media7.4 HighN/AN/ANov 11, 2026
CVE-2026-64667: mcdope pam_usb: pam_usb provides hardware authentication for Linux using removable media4.4 MediumN/AN/ANov 11, 2026
CVE-2026-64666: mcdope pam_usb: pam_usb provides hardware authentication for Linux using removable media7.1 HighN/AN/ANov 11, 2026
CVE-2026-61810: DMTF libspdm: libspdm is a sample implementation that follows the DMTF SPDM specificationsN/A6.0 MediumN/ANov 11, 2026
CVE-2026-59192: cakephp twig-view: TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions…N/A6.9 MediumN/ANov 11, 2026
CVE-2026-59191: cakephp twig-view: TwigView plugin for CakePHP provides wrappers for common View operations and extensions that expose CakePHP functions…N/A6.9 MediumN/ANov 11, 2026
CVE-2026-118368: Akaunting: Akaunting 3.3.0 contains a stored cross-site scripting vulnerability in the XLSX item-import workflowN/A7.0 HighN/ANov 11, 2026
CVE-2026-63660: mapbox node-fontnik: node-fontnik is a library that delivers a range of glyphs rendered as SDFs (signed distance fields) in a protocol buffer8.1 HighN/AN/ANov 11, 2026
CVE-2026-63194: Bahmni bahmni-core: OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients)N/A8.7 HighN/ANov 11, 2026
CVE-2026-63192: Bahmni bahmni-core: OpenMRS module bahmnicore contains Core OpenMRS modules for Bahmni (including ERP & ELIS Atom Feed Clients)N/A7.1 HighN/ANov 11, 2026
CVE-2026-126571: padloc: Padloc 4.0.0 before 4.3.1 contains an authentication bypass vulnerability in the legacy retrieveMFAToken handler that…4.8 Medium6.3 MediumN/ANov 11, 2026
CVE-2026-126570: padloc: Padloc 4.0.0 before 4.3.1 contains a prototype pollution vulnerability that allows SCIM token holders to modify…7.6 High7.0 HighN/ANov 11, 2026
CVE-2026-126569: MbinOrg mbin: Mbin 1.2.1 before 1.11.1 contains a stored cross-site scripting vulnerability in EmbedElement::buildDestructed() that…5.4 Medium5.1 MediumN/ANov 11, 2026
CVE-2026-126567: SemanticMediaWiki: Semantic MediaWiki 3.0.0 before 7.4.1 contains a stored cross-site scripting vulnerability in Special:Ask with the…5.4 Medium5.1 MediumN/ANov 11, 2026
CVE-2026-126566: SemanticMediaWiki: Semantic MediaWiki 7.3.1 before 7.4.1 contains an incorrect authorization vulnerability in…7.1 High7.1 HighN/ANov 11, 2026
CVE-2026-126565: SemanticMediaWiki: Semantic MediaWiki 3.0.0 before 7.4.1 contains a denial of service vulnerability in the ElasticStore and SPARQLStore…4.3 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126564: SemanticMediaWiki: Semantic MediaWiki 2.5.0 before 7.4.1 contains a stored cross-site scripting vulnerability in…5.4 Medium5.1 MediumN/ANov 11, 2026
CVE-2026-126563: SemanticMediaWiki: Semantic MediaWiki 2.4.0 before 7.4.1 contains a reflected cross-site scripting vulnerability in…6.1 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126562: SemanticMediaWiki: Semantic MediaWiki 3.0.0 before 7.4.1 contains an uncontrolled recursion vulnerability in the ElasticStore…4.3 Medium5.3 MediumN/ANov 11, 2026
CVE-2026-126561: SemanticMediaWiki: Semantic MediaWiki 2.5.0 before 7.4.1 contains a missing authorization vulnerability that allows editors without the…7.1 High7.1 HighN/ANov 11, 2026
CVE-2026-126560: SemanticMediaWiki: Semantic MediaWiki 3.0.0 before 7.4.1 contains a stored cross-site scripting vulnerability in the DataTables…5.4 Medium5.1 MediumN/ANov 11, 2026
76-100 of 557027