The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-120315: lobehub chat: LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120314: Jovancoding Network-AI: Network-AI from 5.14.0 before 5.15.5 contains a missing authentication vulnerability in the A2AServer class that allows…7.3 High6.9 MediumN/ANov 2, 2026
CVE-2026-120313: Jovancoding Network-AI: Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers…7.5 High8.7 HighN/ANov 2, 2026
CVE-2026-120312: Jovancoding Network-AI: Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120311: Jovancoding Network-AI: Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to…8.8 High8.7 HighN/ANov 2, 2026
CVE-2026-120310: parse-community parse-server: Parse Server before 8.6.109 and 9.0.0 before 9.10.6-alpha.1 returns stored field values in object update responses…3.1 Low2.3 LowN/ANov 2, 2026
CVE-2026-120309: nuxt: Nuxt from 4.6.0 before 4.6.2 contains a route parameter confusion vulnerability in getRouterParam and getRouterParams…3.7 Low6.3 MediumN/ANov 2, 2026
CVE-2026-120335: deepset-ai farm: A vulnerability has been found in deepset-ai farm up to 0.8.04.8 Medium0.9 LowN/ANov 2, 2026
CVE-2026-120334: deepset-ai farm: A flaw has been found in deepset-ai farm up to 0.8.04.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-68591: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a permissions bypassN/AN/AN/ANov 2, 2026
CVE-2026-68590: MediaTek, Inc. MediaTek chipset: In ip_stack, there is a possible out of bounds read due to improper input validationN/AN/AN/ANov 2, 2026
CVE-2026-68589: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-68588: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible way (for XXX) to XXXXX due to an integer overflowN/AN/AN/ANov 2, 2026
CVE-2026-20600: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to a logic errorN/AN/AN/ANov 2, 2026
CVE-2026-20599: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible escalation of privilege due to a missing permission checkN/AN/AN/ANov 2, 2026
CVE-2026-20598: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to an integer overflowN/AN/AN/ANov 2, 2026
CVE-2026-20597: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20596: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to improper input validationN/AN/AN/ANov 2, 2026
CVE-2026-20595: MediaTek, Inc. MediaTek chipset: In neuropilot, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20594: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds read due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20593: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible application crash due to improper input validationN/AN/AN/ANov 2, 2026
CVE-2026-20592: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible information disclosure due to side channel information disclosureN/AN/AN/ANov 2, 2026
CVE-2026-20591: MediaTek, Inc. MediaTek chipset: In GPU pdma, there is a possible escalation of privilege due to a missing permission checkN/AN/AN/ANov 2, 2026
CVE-2026-20590: MediaTek, Inc. MediaTek chipset: In display, there is a possible system crash due to a logic errorN/AN/AN/ANov 2, 2026
CVE-2026-20585: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
51-75 of 420828