The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121294: Arista Networks EOS: On affected platforms running Arista EOS with a S-BFD reflector proxy configured, an unauthenticated attacker could…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121293: Arista Networks EOS: On affected EOS-based platforms, an attacker who controls a Border Gateway Protocol (BGP) peer can send a crafted BGP…4.4 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-121292: Arista Networks EOS: A malformed Error Report can cause EOS to read beyond packet boundaries, potentially terminating the RPKI agent or…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121291: Arista Networks EOS: A crafted Error Report can leave EOS stuck believing that a cache reset is in progress, preventing ROA publication,…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121290: Arista Networks EOS: On affected platforms running Arista EOS with Border Gateway Protocol (BGP) changing the BGP listen port from its…8.2 High8.3 HighN/ANov 10, 2026
CVE-2026-121289: Arista Networks EOS: On affected platforms running Arista EOS with BGP configured, a specially crafted packet can cause the BGP agent to…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-121288: Arista Networks EOS: An unauthenticated attacker on an adjacent network segment can bypass MD5 authentication and have unauthorized RIP…8.1 High6.1 MediumN/ANov 10, 2026
CVE-2026-121287: Arista Networks EOS: An unauthenticated attacker on an adjacent network segment can send crafted RIPv2 packets to a RIP-enabled interface on…8.8 High7.7 HighN/ANov 10, 2026
CVE-2026-121286: Arista Networks EOS: On affected platforms running Arista EOS in multi-agent routing model with BGP Segment Routing Traffic Engineering…6.5 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120983: Arista Networks EOS: On affected EOS platforms where 802.1x is configured in multi-host authenticated mode and the device is configured with…7.6 High6.1 MediumN/ANov 10, 2026
CVE-2026-120982: Arista Networks EOS: On affected platforms running Arista EOS with Border Gateway Protocol (BGP) configured, An unauthenticated attacker who…7.5 High8.7 HighN/ANov 10, 2026
CVE-2026-120981: Arista Networks EOS: On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the…5.3 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120980: Arista Networks EOS: On affected platforms running Arista EOS with VPLS-BGP enabled, an attacker who has established a BGP session with the…5.3 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120979: Arista Networks EOS: This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link…8.1 High6.1 MediumN/ANov 10, 2026
CVE-2026-120978: Arista Networks EOS: On affected Arista EOS platforms running Border Gateway Protocol with Link State ( BGP-LS) and configured with the…6.5 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120977: Arista Networks EOS: On affected platforms running Arista EOS with 802.1X with Dynamic Host Configuration Protocol (DHCP) device profiling…8.2 High7.1 HighN/ANov 10, 2026
CVE-2026-120976: Arista Networks EOS: On affected platforms running Arista EOS with IEEE 802.1X authentication and MACsec using dynamically derived keys,…6.0 Medium7.0 HighN/ANov 10, 2026
CVE-2026-120975: Arista Networks EOS: On affected platforms running Arista EOS with automatic certificate management configured and automatic Certificate…3.1 Low2.0 LowN/ANov 10, 2026
CVE-2026-120974: Arista Networks EOS: On affected platforms running Arista EOS with IPsec AutoVPN Feature configured with dynamic paths, the configured IPsec…5.3 Medium6.9 MediumN/ANov 10, 2026
CVE-2026-120815: MongoDB MongoDB Server: An incorrect authorization check in the MongoDB Server authorization subsystem may allow an unauthenticated party with…8.4 High8.6 HighN/ANov 10, 2026
CVE-2026-120814: MongoDB MongoDB Server: An improper privilege management issue in the sharding subsystem of MongoDB Server may allow a user holding certain…7.2 High7.5 HighN/ANov 10, 2026
CVE-2026-120813: MongoDB MongoDB Server: An issue in MongoDB Server's client-side field-level encryption (CSFLE) schema processing component allows encryption…5.9 Medium8.2 HighN/ANov 10, 2026
CVE-2026-120812: MongoDB MongoDB Server: An issue in MongoDB Server's query processing component allows an authenticated user with read privileges to cause a…6.5 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120811: MongoDB MongoDB Server: A use-after-free issue exists in the MongoDB server’s classic query engine plan cache5.9 Medium6.0 MediumN/ANov 10, 2026
CVE-2026-120810: MongoDB MongoDB Server: An issue in MongoDB server’s aggregation framework allows an authenticated user with read privileges to cause a denial…6.5 Medium7.1 HighN/ANov 10, 2026
526-550 of 570207