The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-85260: Apache Software Foundation Apache Camel: Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component5.5 MediumN/AN/AOct 19, 2026
CVE-2026-85257: Apache Software Foundation Apache Camel: Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component5.3 MediumN/AN/AOct 19, 2026
CVE-2026-85254: Apache Software Foundation Apache Camel: Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-71253: Apache Software Foundation Apache Johnzon: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache JohnzonN/AN/AN/AOct 19, 2026
CVE-2026-85251: Apache Software Foundation Apache Camel: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component7.5 HighN/AN/AOct 19, 2026
CVE-2026-85250: Apache Software Foundation Apache Camel: Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component7.5 HighN/AN/AOct 19, 2026
CVE-2026-85249: Apache Software Foundation Apache Camel: Improper Input Validation vulnerability in Apache Camel Tika component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-85248: Apache Software Foundation Apache Camel: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache…5.9 MediumN/AN/AOct 19, 2026
CVE-2026-85247: Apache Software Foundation Apache Camel: Improper Certificate Validation vulnerability in Apache Camel Knative component5.9 MediumN/AN/AOct 19, 2026
CVE-2026-90910: Apache Software Foundation Apache Answer: Missing authentication for critical function vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-86589: Apache Software Foundation Apache Answer: Incorrect implementation of authentication algorithm vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79633: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79624: Apache Software Foundation Apache Answer: Insufficient session expiration vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79620: Apache Software Foundation Apache Answer: Exposure of sensitive information through data queries vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79613: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-76994: Apache Software Foundation Apache Answer: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-71563: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-68482: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-67249: Apache Software Foundation Apache Answer: A vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-64945: Apache Software Foundation Apache Answer: A vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-64944: Apache Software Foundation Apache Answer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-64943: Apache Software Foundation Apache Answer: Insertion of Sensitive Information into Log File vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-112192: MISP: MISP contains a vulnerability in the handling of module plugin settingsN/A5.3 MediumN/AOct 19, 2026
CVE-2026-112188: MISP: MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve…N/A7.1 HighN/AOct 19, 2026
CVE-2026-112184: MISP: MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interfaceN/A4.8 MediumN/AOct 19, 2026
51-75 of 409174