The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107017: n/a: Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers…N/AN/AN/AOct 29, 2026
CVE-2026-107016: n/a: Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.N/AN/AN/AOct 29, 2026
CVE-2026-107015: n/a: Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-107014: n/a: Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read…N/AN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…8.1 HighN/AN/AOct 29, 2026
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-107326: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-107327: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107329: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-110186: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-110193: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110196: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96199: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96198: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-85897: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-85890: Microsoft Microsoft Edge (Chromium-based): Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 29, 2026
CVE-2026-79589: n/a: The WIFI4 N300 router (Model: T1 Pro) v1.0.0 by U-speed contains an insecure access control flaw that allows an…N/AN/AN/AOct 29, 2026
CVE-2026-54862: Codection Import and export users and customers: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codection Import…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-48202: Brave: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Brave Brave…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-48195: bPlugins PDF Poster: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-42707: HivePress HivePress Claim Listings: Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting…4.3 MediumN/AN/AOct 29, 2026
601-625 of 520238