The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121908: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121352: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121887: Adobe Adobe Connect: Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121349: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-121900: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…8.3 HighN/AN/ANov 10, 2026
CVE-2026-121351: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121889: Adobe Adobe Connect: Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121894: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121356: Adobe Adobe Connect: Adobe Connect is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121906: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121353: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121902: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.4 CriticalN/AN/ANov 10, 2026
CVE-2026-121354: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121892: Adobe Adobe Connect: Adobe Connect is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that could…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-118483: Adobe Adobe Dimension: Dimension is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in…8.2 HighN/AN/ANov 10, 2026
CVE-2026-92544: Kong Inc.: SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute…N/A8.7 HighN/ANov 10, 2026
CVE-2026-82012: Adobe Premiere: Premiere Pro is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the…7.8 HighN/AN/ANov 10, 2026
CVE-2026-126128: Auth0 Auth0 Node JS: The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its…N/AN/AN/ANov 10, 2026
CVE-2026-126084: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126083: rails: Action Pack is a framework for handling and responding to web requests7.4 HighN/AN/ANov 10, 2026
CVE-2026-126082: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-126081: rails: Action Pack is a framework for handling and responding to web requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-126080: rails: Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects7.5 HighN/AN/ANov 10, 2026
CVE-2026-126079: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126078: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
451-475 of 511254