The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-28249: AMD: Improper preservation of consistency between independent representations of shared state in AMD Secure Encrypted…N/A4.6 MediumN/ANov 10, 2026
CVE-2026-28248: AMD: Improper enforcement of behavioral workflow in AMD Secure Encrypted Virtualization (SEV) firmware could allow a…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-28247: AMD: Improper Access Control Applied to Mirrored or Aliased Memory Regions in AMD Secure Encrypted Virtualization (SEV)…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-126186: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…8.8 HighN/AN/ANov 10, 2026
CVE-2026-126129: Auth0 Auth0 ASP.NET Core Authentication: The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may…N/AN/AN/ANov 10, 2026
CVE-2026-126123: BeeS Software Solutions ERP: BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-126085: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-125958: N-able N-central: Download of code without integrity check vulnerability in N-able N-central allows Remote Code InclusionN/A7.5 HighN/ANov 10, 2026
CVE-2026-125883: N-able N-central: Improper restriction of XML external entity reference vulnerability in N-able N-central allows XML Schema PoisoningN/A9.3 CriticalN/ANov 10, 2026
CVE-2026-125882: N-able N-central: Relative path traversal vulnerability in N-able N-central allows Path TraversalN/A8.6 HighN/ANov 10, 2026
CVE-2026-125881: N-able N-central: Server-Side request forgery (SSRF) vulnerability in N-able N-central allows Server Side Request ForgeryN/A9.3 CriticalN/ANov 10, 2026
CVE-2026-125880: N-able N-central: Improper neutralization of HTTP headers for scripting syntax vulnerability in N-able N-central allows Cross-Site…N/A8.3 HighN/ANov 10, 2026
CVE-2026-125879: N-able N-central: Incorrect privilege assignment vulnerability in N-able N-central allows Privilege EscalationN/A8.6 HighN/ANov 10, 2026
CVE-2026-125878: N-able N-central: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in N-able N-central…N/A8.7 HighN/ANov 10, 2026
CVE-2026-125298: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-125297: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-123341: Adobe Adobe Experience Manager as a Cloud Service: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-123267: Adobe: CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path…5.5 MediumN/AN/ANov 10, 2026
CVE-2026-123262: Adobe: CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-123261: Adobe: CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-123260: Adobe: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-123259: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-123258: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-123041: Kong Inc.: The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client…N/A8.2 HighN/ANov 10, 2026
CVE-2026-122102: Adobe Adobe Connect: Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged…8.7 HighN/AN/ANov 10, 2026
26-50 of 557027