The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-125800: Brainstorm Force Spectra: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-124762: RT-Labs P-Net: P-Net before 1.0.4 finds the RPC session of a received PDU by its activity UUID only, and a reject, fault or cancel PDU…N/A6.0 MediumN/ANov 13, 2026
CVE-2026-124761: RT-Labs P-Net: P-Net before 1.0.4 copies the IP suite of a DCP Set request to the current and the non-volatile configuration, and…N/A7.1 HighN/ANov 13, 2026
CVE-2026-124760: RT-Labs P-Net: P-Net before 1.0.4 sets the alarm receiver state to waiting for confirmation before the data of a received alarm…N/A2.3 LowN/ANov 13, 2026
CVE-2026-124759: RT-Labs P-Net: P-Net before 1.0.4 routes a received RTA alarm frame to an Application Relationship using only the destination alarm…N/A7.1 HighN/ANov 13, 2026
CVE-2026-124758: RT-Labs P-Net: P-Net before 1.0.4 does not check the record data length of an IODWrite request to a non-user record index against the…N/A2.3 LowN/ANov 13, 2026
CVE-2026-116413: Dell: Dell PowerStore contains a use-of-broken-cryptography vulnerability7.1 HighN/AN/ANov 13, 2026
CVE-2026-116412: Dell: Dell PowerStore contains an insecure-file-permissions vulnerability5.5 MediumN/AN/ANov 13, 2026
CVE-2026-116411: Dell: Dell PowerStore contains a Server-Side Request Forgery (SSRF) vulnerability8.8 HighN/AN/ANov 13, 2026
CVE-2026-109096: X.Org: Incorrect handling of negative returns from ddQueryImageAttributes() when processing XvPutImage requests in X.Org…5.5 MediumN/AN/ANov 13, 2026
CVE-2026-109095: X.Org: A integer overflow in glamor Xv Image Size handling in X.Org xwayland before 24.1.15 and X server before 21.1.26 could…N/A6.9 MediumN/ANov 13, 2026
CVE-2026-95518: TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma Enstitüsü Pardus Package Installer: Time-of-check time-of-use (TOCTOU) race condition vulnerability in TÜBİTAK BİLGEM Yazılım Teknolojileri Araştırma…7.0 HighN/AN/ANov 13, 2026
CVE-2026-86356: Dell: Dell PowerStore contains an authorization-bypass vulnerability that could lead to elevation of privilege to…8.8 HighN/AN/ANov 13, 2026
CVE-2026-86355: Dell: Dell PowerStore contains an External Control of File Name or Path vulnerability8.3 HighN/AN/ANov 13, 2026
CVE-2026-128834: Brainstorm Force Spectra: Missing Authorization vulnerability in Brainstorm Force Spectra ultimate-addons-for-gutenberg allows Exploiting…5.3 MediumN/AN/ANov 13, 2026
CVE-2026-125833: YITH YITH WooCommerce Ajax Product Filter: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-125816: PT Norther Lights Production MapSVG: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PT Norther Lights…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-125815: Noah Hearle We’re Open!: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Noah Hearle We’re Open!…5.3 MediumN/AN/ANov 13, 2026
CVE-2026-125801: Automattic WooCommerce: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Automattic…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-121771: PublishPress Gutenberg Blocks: Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg…5.3 MediumN/AN/ANov 13, 2026
CVE-2026-121721: PublishPress Gutenberg Blocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-119518: WProyal Royal Elementor Addons: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WProyal Royal…6.5 MediumN/AN/ANov 13, 2026
CVE-2026-112830: Brizy: Missing Authorization vulnerability in Brizy Brizy brizy allows Exploiting Incorrectly Configured Access Control…5.3 MediumN/AN/ANov 13, 2026
CVE-2026-107526: Dell: Dell PowerStore contains an improper input validation vulnerability4.6 MediumN/AN/ANov 13, 2026
CVE-2026-107525: Dell, Dwll: Dell PowerStore contains an information disclosure vulnerability5.3 MediumN/AN/ANov 13, 2026
201-225 of 532044