The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-124602: GeoVision Inc. GV-Access: The RSA cryptographic key material, including a private key and public key, is embedded within the GV-Access…6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124601: GeoVision Inc. GV-Access: An API key is hardcoded and retrievable from the GV-Access package6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124600: GeoVision Inc. GV-Face: GV-Face transmits sensitive user credentials and related authentication data over unencrypted HTTP connectionsN/A10.0 CriticalN/ANov 10, 2026
CVE-2026-124599: GeoVision Inc. GV-Face: The RSA cryptographic key material, including a private key and public key, is embedded within the application package6.2 MediumN/AN/ANov 10, 2026
CVE-2026-124598: GeoVision Inc. GV-Face: An API key is hardcoded and retrievable from the GV-Face package7.5 HighN/AN/ANov 10, 2026
CVE-2026-123439: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123438: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123437: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123435: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123432: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123431: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123430: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123429: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123427: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123426: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123425: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-123424: Rejected reason: This CVE ID has been rejected as a duplicate.N/AN/AN/ANov 10, 2026
CVE-2026-120017: SAP_SE SAP NetWeaver AS ABAP and ABAP Platform (SAML2 Service Provider): SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-120016: SAP_SE SAP NetWeaver Visual Composer: SAP NetWeaver Visual Composer does not perform sufficient input validation and output encoding on certain request data6.1 MediumN/AN/ANov 10, 2026
CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs7.5 HighN/AN/ANov 10, 2026
CVE-2026-120014: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality7.6 HighN/AN/ANov 10, 2026
CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…7.5 HighN/AN/ANov 10, 2026
CVE-2026-120009: SAP_SE SAP ABAP Developer Tools (AMDP Data Preview): SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within…7.2 HighN/AN/ANov 10, 2026
CVE-2026-120008: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests8.2 HighN/AN/ANov 10, 2026
CVE-2026-109811: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due…6.5 MediumN/AN/ANov 10, 2026
26-50 of 427771
‹›