The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-59179: naorsabag openhop: OpenHop is a tool for creating interactive data-flow diagrams8.3 HighN/AN/AOct 28, 2026
CVE-2026-59177: esphome device-builder: ESPHome Device Builder Dashboard is a dashboard for the ESPHome home management software8.8 HighN/AN/AOct 28, 2026
CVE-2026-59176: jordanburke functype: Functype is a family of TypeScript functional programming libraries7.8 HighN/AN/AOct 28, 2026
CVE-2026-59172: candid82 joker: Joker is a small Clojure interpreter, linter and formatter written in Go7.8 HighN/AN/AOct 28, 2026
CVE-2026-59164: getnora-io nora: NORA is a self-hosted artifact registry and pull-through cache7.1 HighN/AN/AOct 28, 2026
CVE-2026-52729: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software7.1 HighN/AN/AOct 28, 2026
CVE-2026-50541: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software6.5 MediumN/AN/AOct 28, 2026
CVE-2026-116390: stepasyuk Filter Everything — WordPress & WooCommerce Filters: Deserialization of Untrusted Data vulnerability in stepasyuk Filter Everything — WordPress & WooCommerce…7.2 HighN/AN/AOct 28, 2026
CVE-2026-116389: crossi72 Phoenix Media Rename: Deserialization of Untrusted Data vulnerability in crossi72 Phoenix Media Rename phoenix-media-rename allows Object…8.8 HighN/AN/AOct 28, 2026
CVE-2026-116078: mtrudel bandit: Allocation of Resources Without Limits or Throttling vulnerability in the HTTP/2 request body reader of mtrudel bandit…N/A8.7 HighN/AOct 28, 2026
CVE-2026-115968: Ultimate Member: Deserialization of Untrusted Data vulnerability in Ultimate Member Ultimate Member ultimate-member allows Object…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-115603: Advanced Ads GmbH Advanced Ads – Tracking: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Advanced Ads GmbH…8.5 HighN/AN/AOct 28, 2026
CVE-2026-115590: weDevs Dokan: Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects…7.2 HighN/AN/AOct 28, 2026
CVE-2026-105420: Wing Soft Technology Wing FTP Server: Wing FTP Server does not verify user's base folderN/A9.4 CriticalN/AOct 28, 2026
CVE-2026-93516: x.org: A use-after-free caused by lack of lifecycle management when adding / removing XInput master devices in X.org X Server…5.5 MediumN/AN/AOct 28, 2026
CVE-2026-93515: X.org, x.org: A use-after-free in present_clear_window_notifies() in the X.org X Server before 21.1.25 and X Wayland before 24.1.14…N/A6.8 MediumN/AOct 28, 2026
CVE-2026-67080: HCL Software BigFix AEX: HCL BigFix AEX is affected by an Information Disclosure vulnerability due to improper handling of errors or exceptional…6.5 MediumN/AN/AOct 28, 2026
CVE-2026-67079: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Clickjacking vulnerability, which could allow an attacker to embed the application…6.4 MediumN/AN/AOct 28, 2026
CVE-2026-67077: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Server-Side Request Forgery vulnerability, which could allow an attacker to cause the…4.2 MediumN/AN/AOct 28, 2026
CVE-2026-67074: HCL Software BigFix AEX: HCL BigFix AEX is affected by a Remote Code Execution Vulnerability 9.1 CriticalN/AN/AOct 28, 2026
CVE-2026-67073: HCL Software BigFix AEX: HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability8.6 HighN/AN/AOct 28, 2026
CVE-2026-55369: walinejs waline: Waline is a comment system with backend support6.5 MediumN/AN/AOct 28, 2026
CVE-2026-21830: HCL Software BigFix AEX: HCL BigFix AEX product is affected by a vulnerability in the aws-sdk package.3.7 LowN/AN/AOct 28, 2026
CVE-2026-118040: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, improper verification of…7.5 HighN/AN/AOct 28, 2026
CVE-2026-118039: Progress Software Telerik Document Processing Libraries: In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference…7.5 HighN/AN/AOct 28, 2026
201-225 of 413066