The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-109093: X.Org: A stack buffer overflow in ProcXTestFakeInput DeviceValuator handling in X.Org xwayland before 24.1.15 and X server…N/A8.5 HighN/ANov 13, 2026
CVE-2026-109092: X.Org: Incorrectly handled negative sizes when processing ProcXvShmPutImage requests in the X.Org xwayland before 24.1.15 and…7.8 HighN/AN/ANov 13, 2026
CVE-2026-107524: Dell: Dell PowerStore contains an integer overflow vulnerability8.8 HighN/AN/ANov 13, 2026
CVE-2026-107523: Dell: Dell PowerStore contains an integer overflow vulnerability8.7 HighN/AN/ANov 13, 2026
CVE-2026-107522: Dell: Dell PowerStore contains an Improper Authorization vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-103769: Acowebs PDF Invoices and Packing Slips For WooCommerce: Deserialization of Untrusted Data vulnerability in Acowebs PDF Invoices and Packing Slips For WooCommerce…7.2 HighN/AN/ANov 13, 2026
CVE-2026-92241: zephyrproject zephyr: The AVRCP browsing channel's L2CAP receive-buffer callback, browsing_avrcp_l2cap_alloc_buf() in…5.7 MediumN/AN/ANov 13, 2026
CVE-2026-91094: Debian dpkg: A directory traversal bug was discovered when unpacking 3.0 (quilt) source packages, where the packaging tarball could…N/AN/AN/ANov 13, 2026
CVE-2026-86353: Dell: Dell PowerStore contains a use of a weak cryptographic algorithm vulnerability that could allow an attacker with…5.0 MediumN/AN/ANov 13, 2026
CVE-2026-82179: Dell: Dell PowerStore contains an authorization bypass vulnerability4.9 MediumN/AN/ANov 13, 2026
CVE-2026-82177: Dell: Dell PowerStore contains an OS Command Injection vulnerability7.2 HighN/AN/ANov 13, 2026
CVE-2026-77706: Fileorbis Bilişim Hizmetleri Ticaret Anonim Şirketi FileOrbis NextGen FileServer: Improper handling of highly compressed data (data amplification) vulnerability in Fileorbis Bilişim Hizmetleri Ticaret…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-128790: Eclipse Foundation Eclipse BaSyx Go Components: In Eclipse BaSyx Go Components versions up to and including 1.1.2, ABAC-enabled deployments of the Submodel Repository…N/A7.1 HighN/ANov 13, 2026
CVE-2026-127125: RT-Labs P-Net: P-Net before 1.0.4 aborts the Application Relationship of an RPC session when a fragment of a response has been resent…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-127124: RT-Labs P-Net: P-Net before 1.0.4 keeps the RPC session that is allocated for a fragment of a request with an unknown activity UUID,…N/A7.1 HighN/ANov 13, 2026
CVE-2026-127123: RT-Labs P-Net: P-Net before 1.0.4 releases the Application Relationship of an RPC session, without the abort procedure, when a…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-127122: RT-Labs P-Net: P-Net before 1.0.4 does not check the number of MCR request blocks in a Connect request against the number of multicast…N/A7.2 HighN/ANov 13, 2026
CVE-2026-125800: Brainstorm Force Spectra: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-124762: RT-Labs P-Net: P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-124761: RT-Labs P-Net: P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and…N/A7.1 HighN/ANov 13, 2026
CVE-2026-124760: RT-Labs P-Net: P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm…N/A2.3 LowN/ANov 13, 2026
CVE-2026-124759: RT-Labs P-Net: P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm…N/A7.1 HighN/ANov 13, 2026
CVE-2026-124758: RT-Labs P-Net: P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the…N/A2.3 LowN/ANov 13, 2026
CVE-2026-116413: Dell: Dell PowerStore contains a use-of-broken-cryptography vulnerability7.1 HighN/AN/ANov 13, 2026
CVE-2026-116412: Dell: Dell PowerStore contains an insecure-file-permissions vulnerability5.5 MediumN/AN/ANov 13, 2026
176-200 of 532044