The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-106090: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.8 HighN/AN/AOct 13, 2026
CVE-2026-106089: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.8 HighN/AN/AOct 13, 2026
CVE-2026-105994: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass7.7 HighN/AN/AOct 13, 2026
CVE-2026-105903: Adobe: ColdFusion is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could result…9.9 CriticalN/AN/AOct 13, 2026
CVE-2026-105901: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.8 HighN/AN/AOct 13, 2026
CVE-2026-105900: Adobe: ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application…7.5 HighN/AN/AOct 13, 2026
CVE-2026-105899: Adobe: ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in…10.0 CriticalN/AN/AOct 13, 2026
CVE-2026-105898: Adobe: ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the…8.2 HighN/AN/AOct 13, 2026
CVE-2026-105897: Adobe: ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation8.6 HighN/AN/AOct 13, 2026
CVE-2026-105896: Adobe Photoshop: Photoshop Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-105443: IBM WebSphere Application Server - Liberty: IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10 has insufficient isolation between servers…8.2 HighN/AN/AOct 13, 2026
CVE-2026-105442: IBM: IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.10…7.5 HighN/AN/AOct 13, 2026
CVE-2026-104587: n/a: blob42 gosuki through commit 6e2bf34 contains a Stored Cross-Site Scripting (XSS) vulnerabilityN/AN/AN/AOct 13, 2026
CVE-2026-104348: Adobe Photoshop: Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
CVE-2026-104347: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-104346: Adobe Photoshop: Photoshop Desktop is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in…7.8 HighN/AN/AOct 13, 2026
CVE-2026-103829: Adobe Substance 3D Designer: Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103828: Adobe Substance 3D Designer: Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103827: Adobe Substance 3D Designer: Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103826: Adobe Substance 3D Designer: Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103825: Adobe Substance 3D Designer: Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103824: Adobe Substance 3D Designer: Substance3D - Designer is affected by a NULL Pointer Dereference vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103823: Adobe Substance 3D Designer: Substance3D - Designer is affected by a Stack-based Buffer Overflow vulnerability that could result in an application…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103822: Adobe Substance 3D Designer: Substance3D - Designer is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 13, 2026
CVE-2026-103821: Adobe Substance 3D Designer: Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code…7.8 HighN/AN/AOct 13, 2026
276-300 of 657253
‹›