The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-91759: Hitachi Hitachi Dynamic Link Manager for Linux: Out-of-Bounds Write Vulnerability in Hitachi Dynamic Link Manager for Linux7.8 HighN/A0%Nov 10, 2026
CVE-2026-91758: Hitachi Hitachi Dynamic Link Manager for Linux: Out-of-bounds Read and Write Vulnerability in Hitachi Dynamic Link Manager for Linux7.8 HighN/A0%Nov 10, 2026
CVE-2026-91757: Hitachi Hitachi Dynamic Link Manager for VMware: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware7.1 HighN/A1%Nov 10, 2026
CVE-2026-91756: Hitachi Hitachi Dynamic Link Manager for VMware: OS Command Injection Vulnerability in Hitachi Dynamic Link Manager for VMware8.1 HighN/A1%Nov 10, 2026
CVE-2026-91755: Hitachi Hitachi Dynamic Link Manager for VMware: Integer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware8.1 HighN/A0%Nov 10, 2026
CVE-2026-91754: Hitachi Hitachi Dynamic Link Manager for VMware: Stack-based Buffer Overflow Vulnerability in Hitachi Dynamic Link Manager for VMware8.1 HighN/A0%Nov 10, 2026
CVE-2026-86579: Hitachi Hitachi Dynamic Link Manager for Windows: Binary Planting Vulnerability in Hitachi Dynamic Link Manager for Windows8.2 HighN/A0%Nov 10, 2026
CVE-2026-86578: Hitachi Hitachi Dynamic Link Manager for Windows: Link Following Vulnerability in Hitachi Dynamic Link Manager for Windows7.3 HighN/A0%Nov 10, 2026
CVE-2026-115646: Hitachi: Partial String Comparison Vulnerability in HiRDB9.8 CriticalN/A0%Nov 10, 2026
CVE-2026-115640: LimeSurvey LimeSurvey Community Edition: LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants…N/A7.4 High0%Nov 10, 2026
CVE-2026-112125: Hitachi HA Monitor: Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor7.3 HighN/A0%Nov 10, 2026
CVE-2026-125612: Deltaww DIAEnergie: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww…8.8 HighN/A0%Nov 10, 2026
CVE-2026-88708: ASUS Router firmware: An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a…N/A5.3 Medium0%Nov 10, 2026
CVE-2026-88707: ASUS Router firmware: An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request…N/A7.1 High0%Nov 10, 2026
CVE-2026-88710: ASUS Router firmware: Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an…N/A8.7 High1%Nov 10, 2026
CVE-2026-88709: ASUS Router firmware: Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with…N/A7.0 High0%Nov 10, 2026
CVE-2026-89131: SAP_SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request…4.3 MediumN/A0%Nov 10, 2026
CVE-2026-89129: SAP_SE SAP NetWeaver AS Java (Web Services): Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated…5.8 MediumN/A0%Nov 10, 2026
CVE-2026-89128: SAP_SE SAP NetWeaver AS Java (Process Integration Test Tool): Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP…5.3 MediumN/A0%Nov 10, 2026
CVE-2026-89126: SAP_SE SAP Web Dispatcher: SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component10.0 CriticalN/A0%Nov 10, 2026
CVE-2026-89125: SAP_SE SAP Web Dispatcher and Internet Communication Manager: Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker…6.0 MediumN/A0%Nov 10, 2026
CVE-2026-89119: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient…9.6 CriticalN/A0%Nov 10, 2026
CVE-2026-89115: SAP_SE SAP Start Service and SAP Microsoft Management Console: SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection4.4 MediumN/A0%Nov 10, 2026
CVE-2026-89114: SAP_SE SAP NetWeaver AS Java EDM Application: SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests7.5 HighN/A0%Nov 10, 2026
CVE-2026-89103: SAP_SE SAP Gateway: SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker…10.0 CriticalN/A0%Nov 10, 2026
326-350 of 517528