The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114130: nuxt: Nuxt is an open-source web development framework for Vue.jsN/A2.3 Low0%Oct 21, 2026
CVE-2026-114128: withastro astro: Astro is a web framework for content-driven websites6.5 MediumN/A0%Oct 21, 2026
CVE-2026-114127: withastro astro: Astro is a web framework for content-driven websitesN/A2.3 Low0%Oct 21, 2026
CVE-2026-114124: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.9 LowN/A0%Oct 21, 2026
CVE-2026-114122: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.9 LowN/A0%Oct 21, 2026
CVE-2026-114121: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113800: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113798: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113797: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS3.1 LowN/A1%Oct 21, 2026
CVE-2026-113796: electron: Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS4.2 MediumN/A0%Oct 21, 2026
CVE-2026-113787: GitHubNewbie0 odf-kit: odf-kit allows users to generate, fill, read, and convert OpenDocument Format files (.odt, .ods) in TypeScript and…6.1 MediumN/A0%Oct 21, 2026
CVE-2024-5139: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 21, 2026
CVE-2026-114407: e107inc e107: e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.1 Medium0%Oct 21, 2026
CVE-2026-114396: polonel trudesk: Trudesk through 1.2.11 contains a server-side JavaScript injection vulnerability that allows authenticated users to…7.1 High7.1 High0%Oct 21, 2026
CVE-2026-85683: Unknown Jane Menu: The Jane Menu WordPress plugin before 1.5.1 does not have any capability or nonce checks on one of its form handlers,…8.8 HighN/A0%Oct 21, 2026
CVE-2026-81812: Unknown Elementor Website Builder: The Elementor Website Builder WordPress plugin before 4.3.5 does not sanitize uploaded SVG files on every upload route,…6.4 MediumN/A0%Oct 21, 2026
CVE-2026-111948: Unknown User Profile Builder: The User Profile Builder WordPress plugin before 4.0.1 does not escape the current page URL before outputting it in a…7.1 HighN/A0%Oct 21, 2026
CVE-2026-114061: sveltejs kit: SvelteKit (@sveltejs/kit) before 3.0.0 contains a cross-site scripting vulnerability in prerendered pages because a…4.7 Medium2.3 Low0%Oct 21, 2026
CVE-2026-94402: IBM: IBM Carbon Charts 0.4.0 through 1.27.19 is vulnerable to cross-site scripting6.1 MediumN/A0%Oct 20, 2026
CVE-2016-20102: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2014-125132: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2014-125131: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 20, 2026
CVE-2026-113712: cachethq cachet: Cachet is an open-source status page systemN/A4.8 Medium0%Oct 20, 2026
CVE-2026-28330: SolarWinds SolarWinds Observability Self-Hosted: SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that…4.6 MediumN/A0%Oct 20, 2026
CVE-2026-113683: jcrodriguez-dis moodle-mod_vpl: VPL (Virtual Programming Lab) for Moodle before 5.0.0 contains a reflected cross-site scripting vulnerability that…6.1 Medium5.1 Medium0%Oct 20, 2026
101-125 of 10660