The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
Alpine Linux: CVE-2026-123863: Reachable Assertion8.2 HighN/AN/ANov 11, 2026
Alpine Linux: CVE-2026-123862: Uncaught Exception2.9 LowN/AN/ANov 11, 2026
Alpine Linux: CVE-2026-123829: Exposure of Sensitive Information to an Unauthorized Actor2.5 LowN/AN/ANov 11, 2026
Alpine Linux: CVE-2026-123828: Heap-based Buffer Overflow5.9 MediumN/AN/ANov 11, 2026
CVE-2026-123747: OpenPrinting, Red Hat: A flaw was found in pappl-retrofit7.3 HighN/AN/ANov 11, 2026
CVE-2026-119055: Schneider Electric EcoStruxure™ Power Build Rapsody: CWE- 416: Use After Free vulnerability exists that could cause arbitrary code execution when a local attacker could…N/A4.6 MediumN/ANov 11, 2026
CVE-2026-108472: Red Hat: A flaw was found in the xfs_admin utility in xfsprogs7.8 HighN/AN/ANov 11, 2026
CVE-2026-91890: Improper Certificate Validation8.7 HighN/AN/ANov 11, 2026
CVE-2026-91879: Insertion of Sensitive Information into Log File8.8 HighN/AN/ANov 11, 2026
CVE-2026-91872: Insertion of Sensitive Information into Log File5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91871: Improper Certificate Validation7.4 HighN/AN/ANov 11, 2026
CVE-2026-91870: Improper Certificate Validation7.4 HighN/AN/ANov 11, 2026
CVE-2026-86364: Use of Insufficiently Random Values4.7 MediumN/AN/ANov 11, 2026
CVE-2026-86363: Generation of Predictable IV with CBC Mode5.5 MediumN/AN/ANov 11, 2026
CVE-2026-82978: Authorization Bypass Through User-Controlled Key4.3 MediumN/AN/ANov 11, 2026
CVE-2026-77168: Revive Adserver: A cross-site request forgery vulnerability in tracker-invocation.php in Revive Adserver 6.0.8 and earlier allows an…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-68862: Dell Terraform Provider for Dell PowerFlex: Dell Terraform Provider for Dell PowerFlex contain(s) an OS Command Injection Vulnerability in the SDC host…6.6 MediumN/AN/ANov 11, 2026
CVE-2026-68486: Revive Adserver: An authorization bypass in campaign-zone linking in Revive Adserver 6.0.8 and earlier allows an authenticated manager,…5.4 MediumN/AN/ANov 11, 2026
CVE-2026-68485: Revive Adserver: An authorization bypass in website-index.php in Revive Adserver 6.0.8 and earlier allows an authenticated manager…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-65820: aeon-toolkit aeon: aeon is a scikit-learn compatible Python library for learning from time seriesN/A8.7 HighN/ANov 11, 2026
CVE-2026-64858: ckotzbauer vulnerability-operator: vulnerability-operator scans SBOMs and Images for vulnerabilities5.3 MediumN/AN/ANov 11, 2026
CVE-2026-62971: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…7.2 HighN/AN/ANov 11, 2026
CVE-2026-61619: coreruleset: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application…N/A8.8 HighN/ANov 11, 2026
CVE-2026-117373: n/a: Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory TraversalN/AN/AN/ANov 11, 2026
CVE-2026-108565: Revive Adserver: A reflected cross-site scripting vulnerability in the popup invocation options of Revive Adserver 6.0.8 and earlier…4.7 MediumN/AN/ANov 11, 2026
1126-1150 of 422975