The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-110971: Zakład Ubezpieczeń Społecznych Płatnik: Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily…N/A7.7 HighN/AOct 30, 2026
CVE-2026-110970: Zakład Ubezpieczeń Społecznych Płatnik: Płatnik uses HTTP protocol to download updates, libraries and support filesN/A2.3 LowN/AOct 30, 2026
CVE-2026-101213: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Privilege Management vulnerability7.8 HighN/AN/AOct 30, 2026
CVE-2026-101214: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…7.2 HighN/AN/AOct 30, 2026
CVE-2026-111505: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.8 HighN/AN/AOct 30, 2026
CVE-2025-68395: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF contain a note editor module vulnerable to Stored XSSN/A5.1 MediumN/AOct 30, 2026
CVE-2025-68394: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68393: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to SQL injection vulnerabilityN/A8.4 HighN/AOct 30, 2026
CVE-2025-68392: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF allow low privileged users to use some of the functionalities reserved…N/A5.1 MediumN/AOct 30, 2026
CVE-2025-68391: ARKETEAM: ARKETEAM Protectel modules PROTECTELMAJ and BDF are vulnerable to arbitrary file uploadN/A5.3 MediumN/AOct 30, 2026
CVE-2026-119568: vsftpd: vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated…7.4 High9.1 CriticalN/AOct 30, 2026
CVE-2026-119564: Plausible Plausible Analytics: Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site…5.3 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119560: opnsense core: OPNsense core through 26.7.8 contains a configuration injection vulnerability that allows authenticated users to append…5.9 Medium6.0 MediumN/AOct 30, 2026
CVE-2026-119556: Moodle Project moodle: Moodle 4.2.0 through 4.5.15, 5.0.0 through 5.0.11, 5.1.0 through 5.1.8, 5.2.0 through 5.2.4, and 5.3.0 contain a…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119552: louislam uptime-kuma: Uptime Kuma through 2.5.8 contains a race condition in the Socket.IO first-run setup handler that allows…4.8 Medium6.3 MediumN/AOct 30, 2026
CVE-2026-119548: getlago lago: Lago through 1.55.0 contains an authorization bypass vulnerability in Invoices::Payments::StripeService that allows…3.1 Low2.3 LowN/AOct 30, 2026
CVE-2026-119429: phpMyAdmin: phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to…4.3 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119425: opnsense core: OPNsense core 26.1.6 through 26.7.7 contains an authentication bypass vulnerability in the captive portal roaming…5.4 Medium5.3 MediumN/AOct 30, 2026
CVE-2026-119421: juspay hyperswitch: Juspay Hyperswitch through 1.128.0 (and builds before 2026.10.19.0) contains a missing authorization vulnerability that…5.9 Medium8.2 HighN/AOct 30, 2026
CVE-2026-119417: cakephp: CakePHP 4.5.12, 4.6.5, 5.1.8 through 5.1.10, 5.2.14 through 5.2.15, 5.3.7, and 5.4.0 through 5.4.3 contain an email…3.7 Low6.3 MediumN/AOct 30, 2026
CVE-2026-119409: opnsense core: OPNsense before 26.7.8 contains a command injection vulnerability that allows authenticated users with the System:…7.2 High8.6 HighN/AOct 30, 2026
CVE-2026-119378: SQLite: SQLite before 3.54.0 contains a use-after-free vulnerability in the R-Tree extension that allows attackers to make…5.5 Medium6.8 MediumN/AOct 30, 2026
CVE-2026-119375: SQLite: SQLite before 3.54.0 contains an information disclosure vulnerability that allows attackers to read uninitialized…5.5 Medium6.8 MediumN/AOct 30, 2026
CVE-2026-119374: SQLite: SQLite before 3.54.0 built with FTS5 contains a heap buffer overflow in fts5DoSecureDelete() that allows attackers to…7.8 High8.5 HighN/AOct 30, 2026
CVE-2026-119371: SQLite: SQLite before 3.54.0 contains a stack exhaustion vulnerability that allows attackers to bypass the…5.5 Medium6.8 MediumN/AOct 30, 2026
201-225 of 413289