The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-114539: Drupal DocCheck Basic: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal DocCheck Basic allows Authentication…N/AN/AN/AOct 30, 2026
CVE-2026-114538: Drupal Bootstrap: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Bootstrap…N/AN/AN/AOct 30, 2026
CVE-2026-114537: Drupal View Unpublished: Incorrect Authorization vulnerability in Drupal View Unpublished allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114536: Drupal USWDS Paragraph Components: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal USWDS…N/AN/AN/AOct 30, 2026
CVE-2026-114535: Drupal Swiper formatter: Missing Authorization vulnerability in Drupal Swiper formatter allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114534: Drupal Block Attributes: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Block…N/AN/AN/AOct 30, 2026
CVE-2026-114533: Drupal Ágora Transparency Theme: Missing Authorization vulnerability in Drupal Ágora Transparency Theme allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114532: Drupal UI Icons: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons…N/AN/AN/AOct 30, 2026
CVE-2026-114531: Drupal Swiper formatter: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Swiper…N/AN/AN/AOct 30, 2026
CVE-2026-114530: Drupal Dopup: Incorrect Authorization vulnerability in Drupal Dopup allows Forceful BrowsingN/AN/AN/AOct 30, 2026
CVE-2026-114529: Drupal CSV Field: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal CSV Field…N/AN/AN/AOct 30, 2026
CVE-2026-114528: Drupal Zero Point: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Zero Point…N/AN/AN/AOct 30, 2026
CVE-2026-114527: Drupal UI Icons: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons…N/AN/AN/AOct 30, 2026
CVE-2026-114526: Drupal Black Hole: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Black Hole…N/AN/AN/AOct 30, 2026
CVE-2026-114525: Drupal ABC: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal ABC allows…N/AN/AN/AOct 30, 2026
CVE-2026-114524: Drupal Custom Formatters: Privilege Defined With Unsafe Actions vulnerability in Drupal Custom Formatters allows Privilege EscalationN/AN/AN/AOct 30, 2026
CVE-2026-114523: Drupal Ffmpeg Image Toolkit: Improper Neutralization of Special Elements used in an OS Command ("OS Command Injection") vulnerability in Drupal…N/AN/AN/AOct 30, 2026
CVE-2026-110738: Drupal Gin Admin Theme: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Gin Admin…N/AN/AN/AOct 30, 2026
CVE-2026-108515: Drupal Drupal core: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal…N/AN/AN/AOct 30, 2026
CVE-2026-108514: Drupal Drupal core: Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Drupal…N/AN/AN/AOct 30, 2026
CVE-2026-108099: Drupal Entity List: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Entity List…N/AN/AN/AOct 30, 2026
CVE-2026-108097: Drupal Drupal core: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Drupal Drupal core…N/AN/AN/AOct 30, 2026
CVE-2026-107312: Drupal Examples for Developers: Allocation of Resources Without Limits or Throttling vulnerability in Drupal Examples for Developers allows Excessive…N/AN/AN/AOct 30, 2026
CVE-2026-107311: Drupal Permissions by Term: Improper Check for Unusual or Exceptional Conditions vulnerability in Drupal Permissions by Term allows Forceful…N/AN/AN/AOct 30, 2026
CVE-2026-107310: Drupal Freelinking: Server-Side Request Forgery (SSRF) vulnerability in Drupal Freelinking allows Server Side Request ForgeryN/AN/AN/AOct 30, 2026
176-200 of 520238