The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-120979: Arista Networks EOS: This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link…8.1 High6.1 MediumN/ANov 10, 2026
CVE-2026-120978: Arista Networks EOS: On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with the…6.5 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120977: Arista Networks EOS: On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling…8.2 High7.1 HighN/ANov 10, 2026
CVE-2026-120976: Arista Networks EOS: On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys,…6.0 Medium7.0 HighN/ANov 10, 2026
CVE-2026-120975: Arista Networks EOS: On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate…3.1 Low2.0 LowN/ANov 10, 2026
CVE-2026-120974: Arista Networks EOS: On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-120815: MongoDB MongoDB Server: An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with…8.4 High8.6 HighN/ANov 10, 2026
CVE-2026-120814: MongoDB MongoDB Server: An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain…7.2 High7.5 HighN/ANov 10, 2026
CVE-2026-120813: MongoDB MongoDB Server: An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption…5.9 Medium8.2 HighN/ANov 10, 2026
CVE-2026-120812: MongoDB MongoDB Server: An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a…6.5 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120811: MongoDB MongoDB Server: A use-after-free issue exists in the MongoDB server’s classic query engine plan cache5.9 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120810: MongoDB MongoDB Server: An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-120809: MongoDB MongoDB Server: A use-after-free read issue exists in MongoDB’s SBE (Slot-Based Execution) engine when processing aggregation pipelines…6.8 Medium6.1 MediumN/ANov 10, 2026
CVE-2026-120808: MongoDB MongoDB Server: An issue exists in MongoDB's macOS TLS client implementation where certificate chain-of-trust validation is bypassed…7.4 High9.1 CriticalN/ANov 10, 2026
CVE-2026-120807: MongoDB MongoDB Server: A flaw in MongoDB’s X.509 cluster-membership authentication guard could allow a holder of a cluster-member certificate…6.6 Medium7.5 HighN/ANov 10, 2026
CVE-2026-120806: MongoDB MongoDB Server: A flaw in MongoDB Server's user management commands may lead to incomplete cleanup of role authorization data when…5.5 Medium7.0 HighN/ANov 10, 2026
CVE-2026-120805: MongoDB MongoDB Server: In MongoDB Server, an authenticated user with insert privileges on a collection could craft a command with specially…4.3 Medium2.3 LowN/ANov 10, 2026
CVE-2026-120804: MongoDB MongoDB Server: A flaw exists in the server-side SSPI Kerberos authentication handler on Windows Enterprise builds of MongoDB7.5 High8.2 HighN/ANov 10, 2026
CVE-2026-120803: MongoDB MongoDB Server: A use-after-free issue exists in MongoDB’s SBE (Slot-Based Execution) implementation of a window function accumulator…7.1 High7.1 HighN/ANov 10, 2026
CVE-2026-115539: moby, Docker: SwarmKit's Cluster-API proxy can overwrite a forwarded client's TLS identity with an intermediary manager's identityN/A7.7 HighN/ANov 10, 2026
CVE-2026-115538: Docker, Moby: Moby's overlay network driver does not restore the iptables rules for encrypted overlay networks after firewalld…N/A7.0 HighN/ANov 10, 2026
CVE-2026-115483: wpeverest: The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.6.3…7.5 HighN/AN/ANov 10, 2026
CVE-2026-104060: worklenz: Worklenz before 3.3.0 contains an SQL injection vulnerability in the reporting members endpoints that allows…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-102166: Arista Networks Wi-Fi Access Point: Arista C-260 and C-250 access points ship with fleet-wide static cryptographic keys used for firmware image…8.8 High9.4 CriticalN/ANov 10, 2026
CVE-2026-0195: Google Android: In fill of dma.rs, there is a possible way to trigger an out of bounds stack read during direct memory access fills due…N/AN/AN/ANov 10, 2026
451-475 of 557027