The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-95663: Insufficient Session Expiration vulnerability in Apache Camel Keycloak component4.8 MediumN/AN/AOct 26, 2026
CVE-2026-95629: Path Traversal5.4 MediumN/AN/AOct 26, 2026
CVE-2026-95628: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Docling…5.4 MediumN/AN/AOct 26, 2026
CVE-2026-82947: Out-of-bounds Write7.1 HighN/AN/AOct 26, 2026
CVE-2026-82946: RT-Labs AB SOEM: SOEM version 2.0.0 and earlier contains a vulnerability where a malicious device can crash the master system6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82945: RT-Labs AB SOEM: SOEM version 2.0.0 and earlier contains a vulnerability during device configuration where a malicious device can cause…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-82944: Buffer Copy without Checking Size of Input8.8 HighN/AN/AOct 26, 2026
CVE-2026-82943: RT-Labs AB SOEM: SOEM version 2.0.0 and earlier contains vulnerabilities where a malicious device can send messages that cause the…6.5 MediumN/AN/AOct 26, 2026
CVE-2026-70388: Integer Underflow8.3 HighN/AN/AOct 26, 2026
CVE-2026-116372: Improper Input ValidationN/A7.7 HighN/AOct 26, 2026
CVE-2026-116236: A vulnerability has been found in Oray Pugongying X5 Pro 7.6.17.2 High7.3 HighN/AOct 26, 2026
CVE-2026-116235: Oray Pugongying X5 Pro: A flaw has been found in Oray Pugongying X5 Pro 7.6.19.1 Critical8.5 HighN/AOct 26, 2026
CVE-2026-116234: A vulnerability was detected in Oray Pugongying X5 Pro 7.6.19.1 Critical8.5 HighN/AOct 26, 2026
CVE-2026-116233: A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.19.1 Critical8.5 HighN/AOct 26, 2026
CVE-2026-115425: OPNsense OPNsense firewall: Multiple cross site scripting (XSS) vulnerabilities affect OPNsense firewall vesrion 26.7.1_1 and earlier allows low…N/A5.6 MediumN/AOct 26, 2026
CVE-2026-113438: Implem Inc. Pleasanter: Pleasanter provided fails to properly verify passwords in LDAP authentication when processing specially crafted…6.5 Medium6.9 MediumN/AOct 26, 2026
CVE-2026-112828: Missing Authorization4.3 MediumN/AN/AOct 26, 2026
CVE-2026-111841: Cross-Site Request Forgery (CSRF)8.8 HighN/AN/AOct 26, 2026
CVE-2026-110376: Missing Authorization4.3 MediumN/AN/AOct 26, 2026
CVE-2026-101259: Generation of Error Message Containing Sensitive Information5.3 MediumN/AN/AOct 26, 2026
CVE-2026-96581: ash-project ash: Authorization Bypass Through User-Controlled Key vulnerability in ash-project ash allows a user of one tenant to read,…N/A7.6 HighN/AOct 26, 2026
CVE-2026-116232: Oray Pugongying X5 Pro: A weakness has been identified in Oray Pugongying X5 Pro 7.6.19.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116231: A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.19.9 Critical8.6 HighN/AOct 26, 2026
CVE-2026-116230: Ndemic Creations Plague Inc Evolved: A vulnerability was identified in Ndemic Creations Plague Inc Evolved up to 1.24.0.36.3 Medium2.1 LowN/AOct 26, 2026
CVE-2026-116229: ffxiv-teamcraft FFXIV Teamcraft: A vulnerability was determined in ffxiv-teamcraft FFXIV Teamcraft up to 11.4.313.5 Low2.0 LowN/AOct 26, 2026
676-700 of 416032