The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-123437: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123435: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123432: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123431: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123430: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123429: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123427: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123426: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123425: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123424: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-120017: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider): SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions…10.0 CriticalN/A0%Nov 10, 2026
CVE-2026-120016: SAP_SE SAP NetWeaver Visual Composer: SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data6.1 MediumN/A0%Nov 10, 2026
CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs7.5 HighN/A0%Nov 10, 2026
CVE-2026-120014: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality7.6 HighN/A0%Nov 10, 2026
CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…7.5 HighN/A0%Nov 10, 2026
CVE-2026-120009: SAP_SE SAP ABAP Developer Tools (AMDP Data Preview): SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within…7.2 HighN/A0%Nov 10, 2026
CVE-2026-120008: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests8.2 HighN/A0%Nov 10, 2026
CVE-2026-109811: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due…6.5 MediumN/A0%Nov 10, 2026
CVE-2026-109810: SAP_SE SAP NetWeaver Application Server Java (Web Dynpro Java): SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used…6.1 MediumN/A0%Nov 10, 2026
CVE-2026-109809: SAP_SE SAP NetWeaver Application Server Java (NWDI Cockpit): SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain…6.5 MediumN/A0%Nov 10, 2026
CVE-2026-109808: SAP_SE SAP Solution Tools Plug-In (ST-PI): Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an…3.1 LowN/A0%Nov 10, 2026
CVE-2026-109807: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests7.5 HighN/A0%Nov 10, 2026
CVE-2026-109806: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests7.5 HighN/A0%Nov 10, 2026
CVE-2026-109805: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform…6.4 MediumN/A0%Nov 10, 2026
CVE-2026-109804: SAP_SE SAP NetWeaver (SAP Message Server): SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated…7.5 HighN/A0%Nov 10, 2026
376-400 of 415841