The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-115795: RT-Labs P-Net: P-Net before 1.0.3 does not check that a complete block header is present in the received data before reading the next…N/A5.3 MediumN/AOct 29, 2026
CVE-2026-115794: RT-Labs P-Net: P-Net before 1.0.3 passes the application alarm callback a data length derived from the variable part length field of a…N/A2.3 LowN/AOct 29, 2026
CVE-2026-115793: RT-Labs P-Net: P-Net before 1.0.3 does not release the RPC session allocated for an RPC request that names an unknown interface or…N/A8.7 HighN/AOct 29, 2026
CVE-2026-114148: Microsoft: Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 29, 2026
CVE-2026-113576: Adobe Adobe Digital Editions: Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…6.3 MediumN/AN/AOct 29, 2026
CVE-2026-112256: OpenText Advanced Authentication Server: Acceptance of extraneous untrusted data with trusted data vulnerability in OpenText Advanced Authentication Server…N/A9.2 CriticalN/AOct 29, 2026
CVE-2026-112255: OpenText Advanced Authentication Server: Initialization of a resource with an insecure default vulnerability in OpenText Advanced Authentication Server allows…N/A2.9 LowN/AOct 29, 2026
CVE-2026-112200: RT-Labs P-Net: P-Net before 1.0.3 does not release the Application Relationship (AR) and the RPC session when an RPC request is…N/A8.7 HighN/AOct 29, 2026
CVE-2026-111736: RT-Labs P-Net: P-Net before 1.0.3 dereferences a NULL AR pointer in pf_fspm_cm_read_ind() when handling an implicit read request…N/A8.7 HighN/AOct 29, 2026
CVE-2026-111735: RT-Labs P-Net: P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind()N/A7.1 HighN/AOct 29, 2026
CVE-2026-111734: RT-Labs P-Net: P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the…N/A7.1 HighN/AOct 29, 2026
CVE-2026-111733: RT-Labs P-Net: P-Net before 1.0.3 dereferences a NULL AR pointer when handling an implicit read request without a valid target AR UUID…N/A8.7 HighN/AOct 29, 2026
CVE-2026-111732: RT-Labs P-Net: P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the…N/A9.3 CriticalN/AOct 29, 2026
CVE-2026-111731: RT-Labs P-Net: P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0…N/A8.7 HighN/AOct 29, 2026
CVE-2026-111730: RT-Labs P-Net: P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer()N/A7.2 HighN/AOct 29, 2026
CVE-2026-110309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110245: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper…7.5 HighN/AN/AOct 29, 2026
CVE-2026-110244: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110200: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110196: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110193: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110192: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110190: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110186: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-109891: weDevs Happy Addons for Elementor: Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting…6.4 MediumN/AN/AOct 29, 2026
251-275 of 538495