The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123710: Red Hat: A flaw was found in Red Hat Quay9.8 CriticalN/AN/ANov 11, 2026
CVE-2026-111024: Grafana: A user with the Viewer or Editor role could bypass folder permissions on Git Sync managed resources through the…7.1 HighN/AN/ANov 11, 2026
CVE-2026-111000: Grafana: A user with the Editor role who can edit a folder can move it, through the folders resource API, under a folder they…7.1 HighN/AN/ANov 11, 2026
CVE-2026-110992: Grafana: A user who can create Git Sync provisioning jobs (the Editor role by default) could delete or move files outside the…6.5 MediumN/AN/ANov 11, 2026
CVE-2026-110289: Grafana: A user with the Organization Admin role could point the server or token URL of a Git Sync connection at a loopback or…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-109163: Apache Software Foundation Apache HTTP Server: Stack-based buffer overflow vulnerability in Apache HTTP Server's mod_vhost_alias (after CVE-2026-63292) This issue…N/AN/AN/ANov 11, 2026
CVE-2026-107509: Grafana: A user with the Viewer role can make Grafana allocate an unbounded amount of memory, and crash it, with a single SQL…6.5 MediumN/AN/ANov 11, 2026
CVE-2026-106023: Apache Software Foundation Apache HTTP Server: NULL pointer dereference vulnerability in Apache HTTP Server's mod_md during HTTP request processingN/AN/AN/ANov 11, 2026
CVE-2026-102589: Grafana: When independent Grafana instances share the same [rendering] renderer_token, an image renderer key issued by one…7.1 HighN/AN/ANov 11, 2026
CVE-2026-119618: Apache Software Foundation Apache HTTP Server: Concurrent Execution using Shared Resource with Improper Synchronization vulnerability in Apache HTTP Server's…N/AN/AN/ANov 11, 2026
CVE-2026-49236: Apache Software Foundation Apache XML Graphics Batik: Server-Side Request Forgery (SSRF) vulnerability in Apache XML Graphics BatikN/AN/AN/ANov 11, 2026
CVE-2026-48479: AMD: Use of uninitialized or invalid state in AMD Graphics Driver could allow a local attacker to write out of bounds,…N/A6.9 MediumN/ANov 11, 2026
CVE-2026-40853: Apache Software Foundation Apache XML Graphics Batik: A Cross-Site Scripting via Unencoded Font Metadata in Apache Batik SVGFontN/AN/AN/ANov 11, 2026
CVE-2026-125850: webriti Appointment Dark: Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125849: webriti Shk Corporate: Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125848: webriti Leo: Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125847: webriti vdperanto: Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125846: webriti Mazino: Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125845: webriti vdequator: Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125844: webriti vice: Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125843: webriti Spasalon: Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125842: webriti Wallstreet Agency: Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125841: webriti Heroic: Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125840: webriti Rambo: Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue…8.8 HighN/AN/ANov 11, 2026
CVE-2026-125839: webriti ElitePress: Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This…8.8 HighN/AN/ANov 11, 2026
126-150 of 511254