Thanks to visit codestin.com
Credit goes to www.rapid7.com

The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
CVE-2026-83548:Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
Blog ↗CVE details
CVE-2026-81578:PaperCut NG/MF Critical Zero-Day Exploited in the Wild
Blog ↗CVE details
CVE-2026-63520:Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Blog ↗CVE details
CVE-2026-19490:Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Blog ↗CVE details
CVE-2026-63520:Microsoft SharePoint Remote Code Execution (FIXED)
Blog ↗CVE details
CVE-2026-55040:Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
Blog ↗CVE details
TitleEitWModules
CVE-2026-90684: n/a GPAC: A flaw has been found in GPAC up to f1219cde2.8 Low0.9 LowN/ASep 14, 2026
CVE-2026-90683: n/a GPAC: A vulnerability was detected in GPAC up to f1219cde3.3 Low1.9 LowN/ASep 14, 2026
CVE-2026-90682: Matthias-Wandel jhead: A security vulnerability has been detected in Matthias-Wandel jhead up to 3.35.3 Medium1.9 LowN/ASep 14, 2026
CVE-2026-90681: Matthias-Wandel jhead: A weakness has been identified in Matthias-Wandel jhead up to 3.33.3 Low1.9 LowN/ASep 14, 2026
CVE-2023-37252: n/a: An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3N/AN/AN/ASep 14, 2026
CVE-2023-34854: digitaldruid HotelDruid: HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function.6.6 MediumN/AN/ASep 14, 2026
CVE-2023-32803: Amazon ca-certificates: The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove…7.5 HighN/AN/ASep 14, 2026
CVE-2023-32778: ILIAS: An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.13.3 LowN/AN/ASep 14, 2026
CVE-2023-29377: Softing Secure Integration Server: An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.226.6 MediumN/AN/ASep 14, 2026
CVE-2023-28148: Paessler PRTG Network Monitor: A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.7.2 HighN/AN/ASep 14, 2026
CVE-2023-24291: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the record length…2.9 LowN/AN/ASep 14, 2026
CVE-2023-24288: Simon Tatham Portable Puzzle Collection: An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via…2.9 LowN/AN/ASep 14, 2026
CVE-2023-24287: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the "M" command.2.9 LowN/AN/ASep 14, 2026
CVE-2023-24286: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the game description…2.9 LowN/AN/ASep 14, 2026
CVE-2023-24285: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which is triggered when…2.9 LowN/AN/ASep 14, 2026
CVE-2023-24284: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow via the is_markable()…2.9 LowN/AN/ASep 14, 2026
CVE-2026-90680: D-Link DIR-823G: A security flaw has been discovered in D-Link DIR-823G 1.0.2B05_201812079.9 Critical9.4 CriticalN/ASep 14, 2026
CVE-2026-90623: andreashappe cochise: A weakness has been identified in andreashappe cochise up to 0.4.13.7 Low2.9 LowN/ASep 14, 2026
CVE-2026-90622: GNU libredwg: A security flaw has been discovered in GNU libredwg 0.13.43.3 Low1.9 LowN/ASep 14, 2026
CVE-2026-90621: ipa-lab HackingBuddyGPT: A vulnerability was identified in ipa-lab HackingBuddyGPT up to 0.5.06.3 Medium2.1 LowN/ASep 14, 2026
CVE-2023-24283: Simon Tatham Portable Puzzle Collection: Portable Puzzle Collection before 20230116.5782e29 was discovered to contain a buffer overflow which allows attackers…2.9 LowN/AN/ASep 14, 2026
CVE-2023-24035: Nagios Nagios XI: An issue was discovered in Nagios XI before 5.9.33.5 LowN/AN/ASep 14, 2026
CVE-2023-24034: Nagios Nagios XI: An issue was discovered in twilio_ajax_handler.php in Nagios XI before 5.9.33.1 LowN/AN/ASep 14, 2026
CVE-2023-22632: Paessler PRTG Network Monitor: PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor.2.7 LowN/AN/ASep 14, 2026
CVE-2023-22631: Paessler PRTG Network Monitor: PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor.2.7 LowN/AN/ASep 14, 2026
1-25 of 386165