The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-46499: CollaboraOnline online: Collabora Online is a collaborative online office suite based on LibreOffice technology4.3 MediumN/AN/AOct 30, 2026
CVE-2026-61626: libass: libass is a portable subtitle renderer for the ASS/SSA (Advanced Substation Alpha/Substation Alpha) subtitle formatN/A7.3 HighN/AOct 30, 2026
CVE-2015-20130: Netsweeper: Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in…6.1 Medium5.1 MediumN/AOct 30, 2026
CVE-2026-119682: ManageEngine SharePoint Manager Plus: An improper access control vulnerability exists in the multi-factor authentication (MFA) functionality of ManageEngine…N/A7.9 HighN/AOct 30, 2026
CVE-2026-112905: givanz Vvveb: Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores9.0 CriticalN/AN/AOct 30, 2026
CVE-2026-91915: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements in Output…6.8 MediumN/AN/AOct 30, 2026
CVE-2026-91914: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Authentication Bypass by Spoofing vulnerability7.1 HighN/AN/AOct 30, 2026
CVE-2026-91913: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.8 HighN/AN/AOct 30, 2026
CVE-2026-91912: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Use of Hard-coded Cryptographic Key vulnerability7.3 HighN/AN/AOct 30, 2026
CVE-2026-119602: kyz libmspack: libmspack through 0.11alpha contains an uninitialized memory disclosure vulnerability in the MS-ZIP decompressor that…3.7 Low6.3 MediumN/AOct 30, 2026
CVE-2026-119601: sshock AFFLIB: AFFLIB through 3.7.22 contains a heap out-of-bounds write vulnerability in af_get_page() that allows attackers to…6.1 Medium6.9 MediumN/AOct 30, 2026
CVE-2026-119600: simsong tcpflow: tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read…4.8 Medium6.3 MediumN/AOct 30, 2026
CVE-2026-119598: iluobei miaomiaowu: Miaomiaowu before 0.9.3 contains an insecure direct object reference vulnerability in /api/user/proxy-provider-configs…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119597: AIDotNet OpenDeepWiki: OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to…9.8 Critical9.3 CriticalN/AOct 30, 2026
CVE-2026-119596: HDInnovations UNIT3D: UNIT3D through 9.2.0 contains a missing authorization vulnerability in PlaylistZipController::show that allows…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119577: ArcadeData arcadedb: ArcadeDB before 26.10.2 contains an improper authorization vulnerability that allows revoked users to retain access…6.8 Medium7.6 HighN/AOct 30, 2026
CVE-2026-119576: ArcadeData arcadedb: ArcadeDB from 21.12.1 before 26.10.2 contains an authorization bypass vulnerability that allows users with only…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119575: ArcadeData arcadedb: ArcadeDB from 26.8.1 before 26.10.2 contains a server-side request forgery vulnerability that allows authenticated…6.5 Medium7.1 HighN/AOct 30, 2026
CVE-2026-119574: traefik: Traefik from 3.2.0 before 3.7.15 contains a data race in the experimental FastProxy that allows unauthenticated…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119573: traefik: Traefik 3.7.11 before 3.7.15 contains an authorization bypass in the Kubernetes Ingress NGINX provider that skips the…4.4 Medium2.1 LowN/AOct 30, 2026
CVE-2026-119572: traefik: Traefik from 3.7.0-ea.1 before 3.7.15 contains an authentication bypass vulnerability in the Kubernetes Ingress NGINX…8.7 High7.0 HighN/AOct 30, 2026
CVE-2026-119571: parse-community parse-server: Parse Server from 9.7.0 before 9.10.5-alpha.10 contains an authorization flaw that applies _Installation updates…3.7 Low6.3 MediumN/AOct 30, 2026
CVE-2026-119570: parse-community parse-server: Parse Server from 9.7.0 before 9.10.5-alpha.7 contains an information disclosure vulnerability that allows clients to…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119569: parse-community parse-server: Parse Server before 8.6.108 and 9.0.0 before 9.10.5-alpha.9 contains a prototype pollution vulnerability because…5.3 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119542: Red Hat: A flaw was found in the Ickle query parser in Infinispan4.3 MediumN/AN/AOct 30, 2026
201-225 of 418318