The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-0325: Palo Alto Networks: An authorization bypass vulnerability in the GlobalProtect gateway of Palo Alto Networks PAN-OS® software enables an…N/A1.3 LowN/ANov 11, 2026
CVE-2026-0324: OPSWAT MetaDefender Endpoint Security SDK: An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto…N/A5.9 MediumN/ANov 11, 2026
CVE-2026-0323: Palo Alto Networks Checkov by Prisma Cloud: A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local…N/A1.1 LowN/ANov 11, 2026
CVE-2026-91892: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions prior to 1.9.0, contains a vulnerability that may permit the use of…3.7 LowN/AN/ANov 11, 2026
CVE-2026-91891: Dell Terraform Provider for PowerStore: Dell Terraform Provider for PowerStore, versions prior to 1.3.1 , contains a vulnerability that may cause sensitive…7.5 HighN/AN/ANov 11, 2026
CVE-2026-91880: Dell Terraform Provider for PowerFlex: Dell Terraform Provider for PowerFlex, versions 1.5.0 through 1.8.0, contains an Improper Certificate Validation…8.9 HighN/AN/ANov 11, 2026
CVE-2026-91878: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 6.0.0 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91877: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.2 through 10.0.3, contains an Improper Neutralization of Special Elements…7.6 HighN/AN/ANov 11, 2026
CVE-2026-91876: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.0.4 through 10.0.3, contains an Improper Restriction of XML External Entity…5.5 MediumN/AN/ANov 11, 2026
CVE-2026-91875: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 9.2.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91874: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 5.0.0 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91873: Dell OpenManage Ansible Modules: Dell OpenManage Ansible Modules, versions 2.1.2 through 10.0.3, contains an Improper Certificate Validation…8.7 HighN/AN/ANov 11, 2026
CVE-2026-91150: Red Hat: A flaw was found in Cockpit7.5 HighN/AN/ANov 11, 2026
CVE-2026-76080: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams3.7 LowN/AN/ANov 11, 2026
CVE-2026-76079: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams7.2 HighN/AN/ANov 11, 2026
CVE-2026-76078: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams3.1 LowN/AN/ANov 11, 2026
CVE-2026-65967: getfider fider: Fider is a feedback portal for feature requests and suggestions7.1 HighN/AN/ANov 11, 2026
CVE-2026-65843: ForbesLindesay sync-rpc: sync-rpc runs asynchronous commands synchronously by putting them in a separate procesN/A8.7 HighN/ANov 11, 2026
CVE-2026-65840: getfider fider: Fider is a feedback portal for feature requests and suggestions9.6 CriticalN/AN/ANov 11, 2026
CVE-2026-65833: senapati484 iopress: iopress is a native HTTP server for Node.js with platform-specific async I/ON/A6.9 MediumN/ANov 11, 2026
CVE-2026-64861: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams4.3 MediumN/AN/ANov 11, 2026
CVE-2026-63505: getprobo probo: Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams4.9 MediumN/AN/ANov 11, 2026
CVE-2026-61637: Icinga icingaweb2: Icinga Web 2 is an open source monitoring web interface, framework and command-line interface3.5 LowN/AN/ANov 11, 2026
CVE-2026-58505: maplibre geojson-vt: geojson-vt is a JavaScript library for slicing GeoJSON data into vector tiles on the fly, primarily designed to enable…7.5 HighN/AN/ANov 11, 2026
CVE-2026-57500: opencloud-eu reva: REVA is an interoperability platform6.3 MediumN/AN/ANov 11, 2026
151-175 of 511254