The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116604: SourceCodester Online Food Ordering System: A vulnerability has been found in SourceCodester Online Food Ordering System 1.06.5 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116603: SourceCodester Online Food Ordering System: A flaw has been found in SourceCodester Online Food Ordering System 1.04.7 Medium5.1 MediumN/AOct 26, 2026
CVE-2026-111422: Apache Software Foundation Apache Airflow SSH provider: In apache-airflow-providers-ssh before 7.0.1, SSHRemoteJobOperator quoted the values of its templated `environment`…N/AN/AN/AOct 26, 2026
CVE-2026-76654: Kubernetes: An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a…5.8 MediumN/AN/AOct 26, 2026
CVE-2026-2270: Kubernetes: A confused deputy attack exists in the StatefulSet controller that allows a user with namespace-scoped write…5.9 MediumN/AN/AOct 26, 2026
CVE-2026-116602: SourceCodester Online Food Ordering System: A vulnerability was detected in SourceCodester Online Food Ordering System 1.06.5 Medium5.5 MediumN/AOct 26, 2026
CVE-2026-116556: n/a Argilla: A vulnerability was found in Argilla up to 2.8.02.4 Low1.9 LowN/AOct 26, 2026
CVE-2026-116555: n/a Argilla: A vulnerability has been found in Argilla up to 2.8.02.4 Low1.9 LowN/AOct 26, 2026
CVE-2026-116554: n/a Argilla: A flaw has been found in Argilla up to 2.8.03.5 Low2.0 LowN/AOct 26, 2026
CVE-2026-116828: yeswiki: YesWiki before 4.7.0 contains a sql injection vulnerability in despam.php where the from parameter is escaped but…4.9 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116827: yeswiki: YesWiki before 4.7.0 contains a server-side request forgery vulnerability in the Bazar CSV import copyUrlToLocalFile()…6.8 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116826: yeswiki: YesWiki before 4.7.0 contains a server-side request forgery vulnerability in DuplicationManager::downloadFile() that…6.8 Medium8.2 HighN/AOct 26, 2026
CVE-2026-116825: yeswiki: YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature(), which never…6.5 Medium8.3 HighN/AOct 26, 2026
CVE-2026-116824: yeswiki: YesWiki before 4.7.0 contains a stored cross-site scripting vulnerability in handlers/page/referrers_sites.php that…6.1 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116823: yeswiki: YesWiki before 4.7.0 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to…6.1 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116822: yeswiki: YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116821: yeswiki: YesWiki before 4.7.0 contains a read-ACL bypass in AclService::updateRequestWithACL, which interpolates usernames into…6.5 Medium7.1 HighN/AOct 26, 2026
CVE-2026-116820: yeswiki: YesWiki from 4.6.0 before 4.7.0 contains an information disclosure vulnerability that allows unauthenticated attackers…5.3 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116819: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains an information disclosure vulnerability that allows read-level project members to…8.5 High8.4 HighN/AOct 26, 2026
CVE-2026-116818: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains an unauthenticated ClickHouse sql injection vulnerability that allows remote attackers…8.2 High8.8 HighN/AOct 26, 2026
CVE-2026-116817: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains a missing authentication vulnerability that allows unauthenticated attackers to access…6.5 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-116815: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains an improper escaping vulnerability in sankey.service.ts that allows authenticated…4.3 Medium5.3 MediumN/AOct 26, 2026
CVE-2026-116814: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains an information exposure vulnerability that writes database connection URLs and email…6.5 Medium7.1 HighN/AOct 26, 2026
CVE-2026-116813: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains an sql injection vulnerability in ConversionService.getConversion that allows…6.5 Medium7.1 HighN/AOct 26, 2026
CVE-2026-116812: Openpanel-dev openpanel: OpenPanel before 3.0.0 contains a sql injection vulnerability in profileColumnAccess in cohort.service.ts that allows…6.5 Medium7.1 HighN/AOct 26, 2026
1-25 of 416032
›