The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119286: graphql-python graphql-core: GraphQL-core is a Python port of the GraphQL.js reference implementation7.5 HighN/AN/AOct 29, 2026
CVE-2026-115943: Spreadsheet::XLSX versions before 0.19 for Perl allow code execution via string eval of number format conditions in…N/AN/AN/AOct 29, 2026
CVE-2026-119285: gofiber fiber: Fiber is an Express inspired web framework written in Go5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119284: authlib joserfc: joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE)…N/A6.9 MediumN/AOct 29, 2026
CVE-2026-61719: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions8.9 HighN/AN/AOct 29, 2026
CVE-2026-61707: socfortress CoPilot: SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs9.0 CriticalN/AN/AOct 29, 2026
CVE-2026-61673: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutionsN/A6.3 MediumN/AOct 29, 2026
CVE-2026-61671: LabRedesCefetRJ WeGIA: WeGIA is a web manager for charitable institutions8.1 HighN/AN/AOct 29, 2026
CVE-2026-61654: lightdash: Lightdash is an open source business intelligence platformN/A8.3 HighN/AOct 29, 2026
CVE-2026-61645: docat-org docat: Docat is a tool for hosting versioned static documentation9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-61576: lightdash: Lightdash is an open source business intelligence platformN/A8.3 HighN/AOct 29, 2026
CVE-2026-13303: HashiCorp: HashiCorp Boundary and Boundary Enterprise are vulnerable to a server-side request forgery in the Vault credential…8.7 HighN/AN/AOct 29, 2026
CVE-2026-119325: Bricks Bricks Theme: Bricks Theme 2.4 and before for WordPress contains an unauthenticated broken access control vulnerability in the…7.5 HighN/AN/AOct 29, 2026
CVE-2026-119281: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119280: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases3.7 LowN/AN/AOct 29, 2026
CVE-2026-119279: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119278: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119277: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119276: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119210: mariadb-corporation mariadb-connector-j: MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases5.9 MediumN/AN/AOct 29, 2026
CVE-2026-119209: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A7.1 HighN/AOct 29, 2026
CVE-2026-119208: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A7.1 HighN/AOct 29, 2026
CVE-2026-119207: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A7.1 HighN/AOct 29, 2026
CVE-2026-119206: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A7.1 HighN/AOct 29, 2026
CVE-2026-119205: py-pdf pypdf: pypdf is a free and open-source pure-python PDF libraryN/A7.1 HighN/AOct 29, 2026
1-25 of 538495
›