The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-74993: Starnet Computer and Network Systems Inventory Tracking Application: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Starnet Computer…7.5 HighN/AN/ANov 2, 2026
CVE-2026-120463: sassanix Warracker: Warracker before 1.0.4 contains a missing authorization vulnerability in its Paperless-ngx integration that allows an…6.5 Medium6.0 MediumN/ANov 2, 2026
CVE-2026-114364: Apache Software Foundation Apache Syncope: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-113687: Apache Software Foundation Apache Syncope: Improper isolation or compartmentalization vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-113511: Apache Software Foundation Apache Syncope: Authorization bypass through User-Controlled key vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-111959: Apache Software Foundation Apache Arrow Rust: Out-of-bounds read vulnerability in Apache Arrow Rust (`arrow` crate), from version 33.0.0 through to versions 57.3.1,…N/AN/AN/ANov 2, 2026
CVE-2026-110535: Apache Software Foundation Apache Syncope: Improper Privilege Management vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-109083: Apache Software Foundation Apache Syncope: Improper isolation or compartmentalization vulnerability in Apache SyncopeN/AN/AN/ANov 2, 2026
CVE-2026-105602: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Mega Menu Badge Text in Helix Ultimate <…N/A8.6 HighN/ANov 2, 2026
CVE-2026-105601: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - Reflected XSS in StageIt 1.0-5.7.5, 6.0-6.3.5N/A5.3 MediumN/ANov 2, 2026
CVE-2026-105600: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - RCE via setting strings in StageIt 1.0-5.7.5, 6.0-6.3.5N/A8.6 HighN/ANov 2, 2026
CVE-2026-103420: php-web-design.com StageIt extension for Joomla: Joomla Extension - php-web-design.com - CSRF for various actions in StageIt 1.0-5.7.5, 6.0-6.3.5N/A7.2 HighN/ANov 2, 2026
CVE-2026-103419: joomshaper.com Helix Ultimate extension for Joomla: Joomla Extension - joomshaper.com - Stored Cross-Site Scripting (XSS) in Media Picker in Helix Ultimate < 2.2.11.N/A8.6 HighN/ANov 2, 2026
CVE-2026-102802: regularlabs.com: Joomla Extension - regularlabs.com - PHP code injection vector in Sourcerer extension < 17.0.1 when used with Articles…N/A8.9 HighN/ANov 2, 2026
CVE-2026-102801: regularlabs.com: Joomla Extension - regularlabs.com - Exposure of Sensitive Information to Unauthorized Actor in Users Anywhere…N/A5.1 MediumN/ANov 2, 2026
CVE-2026-94349: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Special Elements used in an…8.0 HighN/AN/ANov 2, 2026
CVE-2026-92886: TÜBİTAK BİLGEM Software Technologies Research Institute eta-register: Missing Authorization vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute eta-register allows…7.8 HighN/AN/ANov 2, 2026
CVE-2026-91910: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted…5.7 MediumN/AN/ANov 2, 2026
CVE-2026-91909: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Argument Delimiters in a…4.6 MediumN/AN/ANov 2, 2026
CVE-2026-91908: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature…5.7 MediumN/AN/ANov 2, 2026
CVE-2026-91907: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Neutralization of Input During Web Page…6.8 MediumN/AN/ANov 2, 2026
CVE-2026-91905: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Verification of Cryptographic Signature…6.4 MediumN/AN/ANov 2, 2026
CVE-2026-91904: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource…5.5 MediumN/AN/ANov 2, 2026
CVE-2026-91903: Dell OpenManage Enterprise: Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted…6.1 MediumN/AN/ANov 2, 2026
CVE-2026-116606: Barracuda Networks Barracuda Email Security Gateway (ESG): An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated…N/A9.3 CriticalN/ANov 2, 2026
1-25 of 422529
›