The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-117466: Octopus Deploy Octopus Server: In affected versions of Octopus Server, a user holding the System Manager role could escalate their privileges to full…N/A8.6 HighN/AOct 27, 2026
CVE-2026-117341: Octopus Deploy Octopus Server: In affected versions of Octopus Server, creating a user invitation writes the invitation code to the audit event logN/A7.7 HighN/AOct 27, 2026
CVE-2026-116870: Octopus Deploy Octopus Server: In affected versions of Octopus Server, OIDC token issuer validation was performed inconsistentlyN/A8.7 HighN/AOct 27, 2026
CVE-2026-110737: vaadin: The push endpoint of a Vaadin application that uses server push reflects the request Origin into the…N/A2.3 LowN/AOct 27, 2026
CVE-2026-116892: SemanticMediaWiki: SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116891: SemanticMediaWiki: SemanticMediaWiki from 4.2.0 before 7.2.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.1 MediumN/AOct 27, 2026
CVE-2026-116890: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.0 contains a missing authorization vulnerability in the api.php smwtask module…7.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-116889: SemanticMediaWiki: SemanticMediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116888: SemanticMediaWiki: SemanticMediaWiki from 3.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116887: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…5.4 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116886: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows users with…5.4 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116885: SemanticMediaWiki: Semantic MediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in the…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116884: SemanticMediaWiki: SemanticMediaWiki from 5.0.0 before 7.3.1 contains a stored cross-site scripting vulnerability in…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116883: SemanticMediaWiki: Semantic MediaWiki from 3.1.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116882: SemanticMediaWiki: Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows…4.8 Medium4.8 MediumN/AOct 27, 2026
CVE-2026-116881: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site scripting vulnerability that allows attackers to…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116880: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains a cross-site request forgery vulnerability in Special:SMWAdmin…7.1 High7.1 HighN/AOct 27, 2026
CVE-2026-116879: SemanticMediaWiki: Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask update task…5.4 Medium6.9 MediumN/AOct 27, 2026
CVE-2026-116878: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows…7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-116877: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an uncontrolled resource consumption vulnerability that allows…6.5 Medium8.7 HighN/AOct 27, 2026
CVE-2026-116876: SemanticMediaWiki: Semantic MediaWiki from 2.5.0 before 7.3.1 contains an improper authorization vulnerability that allows ordinary…7.1 High7.1 HighN/AOct 27, 2026
CVE-2026-116875: SemanticMediaWiki: SemanticMediaWiki from 3.0.0 before 7.3.1 contains a reflected cross-site scripting vulnerability in Special:Ask, which…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116874: SemanticMediaWiki: SemanticMediaWiki from 3.1.0 before 7.3.1 contains a reflected cross-site scripting vulnerability that allows…6.1 Medium5.3 MediumN/AOct 27, 2026
CVE-2026-116873: SemanticMediaWiki: Semantic MediaWiki from 7.3.0 before 7.3.1 contains a missing authorization vulnerability in the smwtask API module…7.3 High6.9 MediumN/AOct 27, 2026
CVE-2026-116872: SemanticMediaWiki: Semantic MediaWiki from 3.0.0 before 7.3.1 contains an algorithmic complexity vulnerability in…7.5 High8.7 HighN/AOct 27, 2026
1-25 of 415299
›