The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-81936: Lenovo XClarity Controller: An internal security review identified a development regression from ThinkSystem v4 XClarity Controller 3 (XCC3)…6.8 Medium7.1 HighN/ANov 11, 2026
CVE-2026-65952: Lenovo OneCLI: Improper neutralization of special elements used in an OS command in the remote SSH operation functionality of Lenovo…8.5 High5.8 MediumN/ANov 11, 2026
CVE-2026-65951: Lenovo OneCLI: A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux…5.8 Medium5.2 MediumN/ANov 11, 2026
CVE-2026-65950: Lenovo OneCLI: A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could…5.8 Medium5.2 MediumN/ANov 11, 2026
CVE-2026-65949: Lenovo XClarity Integrator for WAC: Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows…7.2 High8.6 HighN/ANov 11, 2026
CVE-2026-91151: Red Hat: A flaw was found in Cockpit7.3 HighN/AN/ANov 11, 2026
CVE-2026-126815: XauenDevs Lagarto Chivato: Pre-account hijacking in the authentication flow in Lagarto Chivato 0.4.1 and earlier on Web allows remote…8.1 HighN/AN/ANov 11, 2026
CVE-2026-126784: XauenDevs Lagarto Chivato: Missing rate limiting, per-account submission quota and geographic validation in the publicar_aviso RPC function in…4.3 MediumN/AN/ANov 11, 2026
CVE-2026-122095: AsiaInfo BSS Platform: AsiaInfo BSS Platform 9.2 before 9.2.38 has a stored cross-site scripting (XSS) vulnerability in the menu icon upload…7.6 HighN/AN/ANov 11, 2026
CVE-2026-0331: Palo Alto Networks: An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated remote…N/A6.6 MediumN/ANov 11, 2026
CVE-2026-0330: Palo Alto Networks: A remote code execution (RCE) vulnerability in Palo Alto Networks PAN-OS® software on Panorama enables an authenticated…N/A6.1 MediumN/ANov 11, 2026
CVE-2026-0329: Palo Alto Networks: A buffer overflow vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network…N/A4.6 MediumN/ANov 11, 2026
CVE-2026-0328: Palo Alto Networks: Authentication bypass vulnerabilities in the GlobalProtect™ portal and gateway of Palo Alto Networks PAN-OS® software…N/A2.7 LowN/ANov 11, 2026
CVE-2026-0327: Palo Alto Networks: A privilege escalation vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…N/A2.3 LowN/ANov 11, 2026
CVE-2026-0326: Palo Alto Networks: A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt…N/A1.7 LowN/ANov 11, 2026
CVE-2026-0325: Palo Alto Networks: An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…N/A1.3 LowN/ANov 11, 2026
CVE-2026-0324: OPSWAT MetaDefender Endpoint Security SDK: An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto…N/A5.9 MediumN/ANov 11, 2026
CVE-2026-0323: Palo Alto Networks Checkov by Prisma Cloud: A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…N/A1.1 LowN/ANov 11, 2026
CVE-2026-91892: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of…3.7 LowN/AN/ANov 11, 2026
CVE-2026-91891: Dell Terraform Provider for PowerStore: Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive…7.5 HighN/AN/ANov 11, 2026
CVE-2026-91880: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation…8.9 HighN/AN/ANov 11, 2026
CVE-2026-91878: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91877: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91876: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91875: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
126-150 of 511254