The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-14447: Google Android: In ext_mem_obj_get_page of memss-mfw.c, there is a possible way to return an out of bounds physical address via an…N/AN/AN/ANov 10, 2026
CVE-2026-126062: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming language3.7 LowN/AN/ANov 10, 2026
CVE-2026-126061: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.3 MediumN/AN/ANov 10, 2026
CVE-2026-125341: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework2.0 LowN/AN/ANov 10, 2026
CVE-2026-125340: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.5 MediumN/AN/ANov 10, 2026
CVE-2026-125339: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework6.1 MediumN/AN/ANov 10, 2026
CVE-2026-125338: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework4.5 MediumN/AN/ANov 10, 2026
CVE-2026-125337: wintercms winter: Winter CMS is a content management system built on the Laravel PHP framework8.3 HighN/AN/ANov 10, 2026
CVE-2026-124848: Amazon Kiro CLI: Incorrect default file permissions in Kiro CLI (formerly Amazon Q Developer CLI) before version 2.27.0 on macOS and…5.5 Medium6.8 MediumN/ANov 10, 2026
CVE-2026-124016: postalsys postal-mime: postal-mime before 4.2.1 contains an algorithmic complexity denial of service vulnerability that allows unauthenticated…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121530: Fortinet FortiOS: A improper authentication vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6 may allow a remote authenticated…6.6 MediumN/AN/ANov 10, 2026
CVE-2026-121529: Fortinet: A origin validation error vulnerability in Fortinet FortiClientMac 7.4.0 through 7.4.7, FortiClientWindows 7.4.0…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-121371: Arista Networks EOS: On affected EOS versions with the eAPI service enabled, a specially crafted HTTP request can allow an unauthenticated,…7.5 High8.7 HighN/ANov 10, 2026
CVE-2026-121370: Arista Networks EOS: On affected platforms running Arista EOS with Precision Time Protocol (PTP) configured, an unauthenticated attacker…8.6 High9.2 CriticalN/ANov 10, 2026
CVE-2026-121369: Arista Networks EOS: On affected platforms running Arista EOS under specific link configurations an attacker with direct connectivity to the…5.3 Medium6.7 MediumN/ANov 10, 2026
CVE-2026-121368: Arista Networks EOS: On affected platforms running Arista EOS with Bidirectional Forwarding Detection (BFD) configured to use keyed MD5 or…8.6 High8.9 HighN/ANov 10, 2026
CVE-2026-121367: Arista Networks EOS: On affected Arista EOS platforms with Routing Information Protocol version 2 (RIPv2) configured, under certain…9.6 Critical6.1 MediumN/ANov 10, 2026
CVE-2026-121295: Arista Networks EOS: On affected platforms running Arista EOS configured as S-BFD peers, an unauthenticated attacker could send a crafted…8.6 High9.2 CriticalN/ANov 10, 2026
CVE-2026-121294: Arista Networks EOS: On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121293: Arista Networks EOS: On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP…4.4 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121292: Arista Networks EOS: A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121291: Arista Networks EOS: A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication,…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121290: Arista Networks EOS: On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121289: Arista Networks EOS: On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-121288: Arista Networks EOS: An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP…8.1 High6.1 MediumN/ANov 10, 2026
376-400 of 557027