The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.025.3 Medium5.5 Medium0%Nov 10, 2026
CVE-2026-124604: GeoVision Inc. GV-Cloud: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Cloud application…6.2 MediumN/A0%Nov 10, 2026
CVE-2026-124603: GeoVision Inc. GV-Cloud: An API key is hardcoded and retrievable from the GV-Cloud application package6.2 MediumN/A0%Nov 10, 2026
CVE-2026-124602: GeoVision Inc. GV-Access: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access…6.2 MediumN/A0%Nov 10, 2026
CVE-2026-124601: GeoVision Inc. GV-Access: An API key is hardcoded and retrievable from the GV-Access package6.2 MediumN/A0%Nov 10, 2026
CVE-2026-124600: GeoVision Inc. GV-Face: GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connectionsN/A10.0 Critical0%Nov 10, 2026
CVE-2026-124599: GeoVision Inc. GV-Face: The RSA cryptographic key material, including a private key and public key, is embedded within the application package6.2 MediumN/A0%Nov 10, 2026
CVE-2026-124598: GeoVision Inc. GV-Face: An API key is hardcoded and retrievable from the GV-Face package7.5 HighN/A0%Nov 10, 2026
CVE-2026-123439: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123438: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123437: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123435: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123432: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123431: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123430: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123429: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123427: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123426: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123425: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123424: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-120017: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider): SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions…10.0 CriticalN/A0%Nov 10, 2026
CVE-2026-120016: SAP_SE SAP NetWeaver Visual Composer: SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data6.1 MediumN/A0%Nov 10, 2026
CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs7.5 HighN/A0%Nov 10, 2026
CVE-2026-120014: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality7.6 HighN/A0%Nov 10, 2026
CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…7.5 HighN/A0%Nov 10, 2026
301-325 of 517528