The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-103408: Juniper Networks Session Smart Router: A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103407: Juniper Networks: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103406: Juniper Networks Session Smart Conductor: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-103405: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…5.8 MediumN/AN/AOct 28, 2026
CVE-2026-103404: Juniper Networks Session Smart Conductor: An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session…6.8 MediumN/AN/AOct 28, 2026
CVE-2026-103403: Juniper Networks: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103402: Juniper Networks: An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103401: Juniper Networks: An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103393: Juniper Networks Session Smart Router: An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an…4.3 MediumN/AN/AOct 28, 2026
CVE-2026-103392: Juniper Networks Session Smart Router: An Out-of-Bounds Write vulnerability in the TCP header processing in Juniper Networks Session Smart Router allows an…4.8 MediumN/AN/AOct 28, 2026
CVE-2026-103391: Juniper Networks Session Smart Router: An Out-of-bounds Write vulnerability in the SSR TCP proxy/optimization path in Juniper Networks Session Smart Router…5.3 MediumN/AN/AOct 28, 2026
CVE-2026-100105: Grafana: A user with permission to edit contact points but not their protected fields can change protected settings, such as a…7.7 HighN/AN/AOct 28, 2026
CVE-2026-103410: Juniper Networks Session Smart Router: An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an…7.5 HighN/AN/AOct 28, 2026
CVE-2026-103400: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…5.5 MediumN/AN/AOct 28, 2026
CVE-2026-103394: Juniper Networks Session Smart Router: An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an…3.7 LowN/AN/AOct 28, 2026
CVE-2026-103390: Juniper Networks: An Out-of-Bounds Read vulnerability in the HttpParser component in Juniper Networks Session Smart Router and Session…5.3 MediumN/AN/AOct 28, 2026
Alma Linux: CVE-2026-93522: Important: xorg-x11-server-Xwayland security update (ALSA-2026-85193)7.8 HighN/AN/AOct 28, 2026
Alma Linux: CVE-2026-93521: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/AN/AOct 28, 2026
CVE-2026-67187: Saturday Drive Ninja Forms: Ninja Forms plugin for WordPress before 3.15.4 contains an incomplete server-side validation vulnerability that allows…7.1 High5.1 MediumN/AOct 28, 2026
CVE-2026-59979: YosemiteCrew Yosemite-Crew: YosemiteCrew provides organization-based service and task management8.3 HighN/AN/AOct 28, 2026
CVE-2026-56828: shopperlabs shopper: Shopper is a Headless e-commerce Admin Panel8.8 HighN/AN/AOct 28, 2026
CVE-2026-50543: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software4.3 MediumN/AN/AOct 28, 2026
CVE-2026-50542: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software5.4 MediumN/AN/AOct 28, 2026
CVE-2026-50539: xibosignage xibo-cms: Xibo is an open source digital signage platform with a web content management system and Windows display player software6.5 MediumN/AN/AOct 28, 2026
CVE-2026-47235: simulationcraft simc: SimulationCraft is a tool to explore combat mechanics in World of WarcraftN/A7.5 HighN/AOct 28, 2026
676-700 of 538495