The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-15201: Synology DiskStation Manager (DSM): An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager (DSM) before…5.9 MediumN/AN/ANov 12, 2026
CVE-2026-15198: Synology DiskStation Manager (DSM): A missing authentication for critical functionality vulnerability in the Webdav API in Synology DiskStation Manager…6.5 MediumN/AN/ANov 12, 2026
CVE-2026-13672: Synology DiskStation Manager (DSM): An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager (DSM)…8.8 HighN/AN/ANov 12, 2026
CVE-2026-13656: Synology DiskStation Manager (DSM): An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology…5.4 MediumN/AN/ANov 12, 2026
CVE-2026-124993: Synology DiskStation Manager (DSM): An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager (DSM) before…5.3 MediumN/AN/ANov 12, 2026
CVE-2026-117687: Six Apart Ltd.: Movable Type provided by Six Apart Ltd7.3 High6.9 MediumN/ANov 12, 2026
CVE-2026-111436: openEuler iSulad: Missing release of memory after effective lifetime vulnerability in openEuler iSulad on Linux4.4 MediumN/AN/ANov 12, 2026
CVE-2026-111435: openEuler iSulad: Relative path traversal vulnerability in openEuler iSulad on Linux7.4 HighN/AN/ANov 12, 2026
CVE-2026-111434: openEuler iSulad: Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux5.6 MediumN/AN/ANov 12, 2026
CVE-2026-111433: openEuler iSulad: UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux8.6 HighN/AN/ANov 12, 2026
CVE-2026-114556: MailEnable: MailEnable Save Directory Traversal Arbitrary File Creation Vulnerability7.4 HighN/AN/ANov 12, 2026
CVE-2026-114558: OriginLab Origin Viewer: OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114568: OriginLab Origin Viewer: OriginLab Origin Viewer OPJ File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114567: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114566: OriginLab Origin Viewer: OriginLab Origin Viewer OGM File Parsing Memory Corruption Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114565: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114564: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114563: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114562: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114561: OriginLab Origin Viewer: OriginLab Origin Viewer OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114560: OriginLab Origin Viewer: OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114559: OriginLab Origin Viewer: OriginLab Origin Viewer OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-114569: OriginLab Origin Viewer: OriginLab Origin Viewer OGWU File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability7.8 HighN/AN/ANov 12, 2026
CVE-2026-122044: Philips Hue Bridge Pro: Philips Hue Bridge Pro Protection Mechanism Failure Authentication Bypass Vulnerability8.8 HighN/AN/ANov 12, 2026
CVE-2026-118632: Philips Hue Bridge Pro: Philips Hue Bridge Pro SQL Injection Remote Code Execution Vulnerability8.0 HighN/AN/ANov 12, 2026
176-200 of 433023