The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…8.1 HighN/AN/AOct 29, 2026
CVE-2026-104316: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104315: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104314: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104312: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive…3.5 LowN/AN/AOct 29, 2026
CVE-2026-104310: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104308: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…8.5 HighN/AN/AOct 29, 2026
CVE-2026-102590: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…5.0 MediumN/AN/AOct 29, 2026
CVE-2026-101288: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2025-13050: Centreon: Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user5.4 MediumN/AN/AOct 29, 2026
CVE-2026-118758: kubeflow pipelines: Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows7.5 HighN/AN/AOct 29, 2026
CVE-2026-119142: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability where dropping the…4.8 Medium5.9 MediumN/AOct 29, 2026
CVE-2026-119138: bytecodealliance wasmtime: Wasmtime 46.0.0 before 48.0.6 and 49.0.0 before 49.0.3 contains a denial of service vulnerability that allows pending…4.8 Medium5.9 MediumN/AOct 29, 2026
CVE-2026-119134: bytecodealliance wasmtime: Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 caps component-model resource handle tables…6.2 Medium6.9 MediumN/AOct 29, 2026
CVE-2026-119130: bytecodealliance wasmtime: Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 does not verify that set-path-with-query values…2.6 Low2.1 LowN/AOct 29, 2026
CVE-2026-119126: parse-community parse-server: Parse Server before 8.6.106 and 9.0.0 before 9.10.5-alpha.7 mishandles dot notation keys with null or undefined values…3.1 Low2.3 LowN/AOct 29, 2026
CVE-2026-119122: unclecode crawl4ai: Crawl4AI before 0.9.5 contains a blind server-side request forgery vulnerability in the Docker server that allows API…5.3 Medium6.9 MediumN/AOct 29, 2026
CVE-2026-119118: unclecode crawl4ai: Crawl4AI before 0.9.5 contains an improper certificate validation vulnerability that allows network attackers to…6.5 Medium8.3 HighN/AOct 29, 2026
CVE-2026-97073: myCred: Missing Authorization vulnerability in myCred myCred mycred allows Exploiting Incorrectly Configured Access Control…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-80069: Stylemix MasterStudy LMS WordPress Plugin: MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any…4.3 Medium5.3 MediumN/AOct 29, 2026
CVE-2026-80067: Stylemix MasterStudy LMS WordPress Plugin: MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated…5.4 Medium5.3 MediumN/AOct 29, 2026
CVE-2026-54871: Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons: Missing Authorization vulnerability in Mamunur Rashid ShopBuilder – Elementor WooCommerce Builder Addons shopbuilder…5.3 MediumN/AN/AOct 29, 2026
276-300 of 538495