The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-8372: Axis Communications AB AXIS Camera Station Pro: A vulnerability that could allow an attacker to gain unauthorized access.8.8 HighN/AN/ANov 10, 2026
CVE-2026-63288: Axis Communications AB: A WebSocket request sent to a specific API endpoint allows unauthorized access to a separate API endpoint8.3 HighN/AN/ANov 10, 2026
CVE-2026-63282: Axis Communications AB AXIS OS: Improper shell quote escaping when processing user-controlled input, potentially allowing command injection, which…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-4762: Axis Communications AB AXIS Camera Station Pro: A vulnerability to perform a privilege escalation attack on the server as a non-admin user.8.8 HighN/AN/ANov 10, 2026
CVE-2026-14918: Axis Communications AB: The Signed Video Framework contained a out-of-bounds read issue in the Signed Video Framework which could lead the…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-14543: Axis Communications AB AXIS OS: The VAPIX Edge storage API, enabling the escalation of user privileges by circumventing filesystem isolation, granting…3.9 LowN/AN/ANov 10, 2026
CVE-2026-14542: Axis Communications AB AXIS OS: The VAPIX SIP configuration API lacked sufficient input validation, which could potentially lead to privilege escalation6.7 MediumN/AN/ANov 10, 2026
CVE-2026-13409: Axis Communications AB AXIS OS: The VAPIX API dynamicoverlay.cgi which results in a Denial-of-Service of the overlay functionality4.3 MediumN/AN/ANov 10, 2026
CVE-2026-12964: Axis Communications AB AXIS Camera Station Pro: A vulnerability allowing for privileged escalation of the viewer account to gain administrator privileges.8.0 HighN/AN/ANov 10, 2026
CVE-2026-12963: Axis Communications AB: A vulnerability that could allow a viewer account to gain unauthorized access to network attached storage devices on…7.4 HighN/AN/ANov 10, 2026
CVE-2026-12389: Axis Communications AB AXIS Camera Station Pro: A vulnerability that could lead to a high privileged authenticated user performing a remote code execution attack.8.4 HighN/AN/ANov 10, 2026
CVE-2026-119273: Unknown BulletProof Security: The BulletProof Security WordPress plugin through 7.2 does not sufficiently protect its security log files or prevent…N/AN/AN/ANov 10, 2026
CVE-2026-110516: Unknown All in One Addons For WPBakery Page Builder (formerly Visual Composer): The All in One Addons For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.2 does not…N/AN/AN/ANov 10, 2026
CVE-2026-104676: Unknown Zion Builder: The Zion Builder WordPress plugin through 3.6.17 does not sanitize uploaded SVG files or validate their contents before…N/AN/AN/ANov 10, 2026
CVE-2026-63287: Axis Communications AB: It was possible for an authenticated non-admin user to modify certain data objects without having the appropriate…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-13387: Axis Communications AB AXIS Camera Station Pro: A vulnerability related to URL redirection handling during the sign-out flow that could allow a user to be redirected…3.5 LowN/AN/ANov 10, 2026
CVE-2026-13312: Axis Communications AB: A vulnerability that could allow an attacker to compromise a system.9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-96769: Codup Extend B2B - Companies and Users Management for WooCommerce: The Extend B2B - Companies and Users Management for WooCommerce plugin for WordPress is vulnerable to Sensitive…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-92864: Hitachi: Insecure Temporary File Vulnerability in Hitachi Dynamic Link Manager for AIX (for markets outside Japan) and Hitachi…7.3 HighN/AN/ANov 10, 2026
CVE-2026-92863: Hitachi Hitachi Dynamic Link Manager for AIX: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for AIX (for the Japanese market)7.0 HighN/AN/ANov 10, 2026
CVE-2026-91764: Hitachi Hitachi Dynamic Link Manager for Linux: Improper Link Resolution Before File Access Vulnerability in Hitachi Dynamic Link Manager for Linux8.1 HighN/AN/ANov 10, 2026
CVE-2026-91763: Hitachi Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux8.2 HighN/AN/ANov 10, 2026
CVE-2026-91762: Hitachi Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux7.9 HighN/AN/ANov 10, 2026
CVE-2026-91761: Hitachi Hitachi Dynamic Link Manager for Linux: UNIX Symbolic Link (Symlink) Following Vulnerability in Hitachi Dynamic Link Manager for Linux8.2 HighN/AN/ANov 10, 2026
CVE-2026-91760: Hitachi Hitachi Dynamic Link Manager for Linux: Heap-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for Linux7.0 HighN/AN/ANov 10, 2026
176-200 of 420168