The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118996: Improper Removal of Sensitive Data Before Storage or TransferN/AN/AN/AOct 30, 2026
CVE-2026-118995: Permissive Regular ExpressionN/AN/AN/AOct 30, 2026
CVE-2026-118994: CallBackery versions before 0.62.0 for Perl allow log injection via newlines in the login nameN/AN/AN/AOct 30, 2026
CVE-2026-118993: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 30, 2026
CVE-2026-118992: OS Command InjectionN/AN/AN/AOct 30, 2026
CVE-2026-118991: Use of Password Hash With Insufficient Computational EffortN/AN/AN/AOct 30, 2026
CVE-2026-118990: Improper Link Resolution Before File AccessN/AN/AN/AOct 30, 2026
CVE-2026-118988: Path TraversalN/AN/AN/AOct 30, 2026
CVE-2026-116130: Null Byte Interaction Error (Poison Null Byte)N/AN/AN/AOct 30, 2026
CVE-2026-116128: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 30, 2026
CVE-2026-116127: Inconsistent Interpretation of HTTP RequestsN/AN/AN/AOct 30, 2026
CVE-2026-115866: Inefficient Regular Expression Complexity (ReDoS)N/AN/AN/AOct 30, 2026
CVE-2026-115865: Memory Allocation with Excessive Size ValueN/AN/AN/AOct 30, 2026
CVE-2026-112374: FOSSBilling: FOSSBilling before 0.8.9 contains a Cross-Site Request Forgery vulnerability in the staff guest login endpoint (POST…4.3 Medium5.1 MediumN/AOct 30, 2026
CVE-2026-111503: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…7.1 HighN/AN/AOct 30, 2026
CVE-2026-111502: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Insufficiently Protected Credentials vulnerability4.3 MediumN/AN/AOct 30, 2026
CVE-2026-111501: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Restriction of Excessive Authentication…5.4 MediumN/AN/AOct 30, 2026
CVE-2026-119599: looplj AxonHub: AxonHub through 1.0.0-beta11 contains a privilege escalation vulnerability that allows project users to assign…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119578: Project-MONAI MONAI: MONAI from 1.6.0 before 1.6.1 contains a remote code execution vulnerability in Auto3DSeg algo_from_json() that allows…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119591: SQLite: SQLite before 3.54.0 contains a stack exhaustion vulnerability in countOfViewOptimization() that allows attackers to…5.5 Medium6.8 MediumN/AOct 30, 2026
CVE-2026-119586: SQLite: SQLite command-line shell through 3.54.1 contains a command injection vulnerability in the .recover command that emits…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119568: vsftpd: vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated…7.4 High9.1 CriticalN/AOct 30, 2026
CVE-2026-119567: vsftpd: vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119566: prometheus: Prometheus through 3.15.1 contains a credential leak vulnerability that allows attackers to capture Azure AD or Google…4.8 Medium6.3 MediumN/AOct 30, 2026
CVE-2026-119565: Plausible Plausible Analytics: Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that…4.3 Medium5.3 MediumN/AOct 30, 2026
201-225 of 418318