The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-85316: Apache Software Foundation Apache Camel: Insufficient Granularity of Access Control vulnerability in Apache Camel Platform HTTP component4.8 MediumN/AN/AOct 19, 2026
CVE-2026-85315: Apache Software Foundation Apache Camel: Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel gRPC component5.3 MediumN/AN/AOct 19, 2026
CVE-2026-85314: Apache Software Foundation Apache Camel: Improper Input Validation vulnerability in Apache Camel Mail component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-85313: Apache Software Foundation Apache Camel: Permissive Cross-domain Policy with Untrusted Domains vulnerability in Apache Camel Jetty component4.3 MediumN/AN/AOct 19, 2026
CVE-2026-85312: Apache Software Foundation Apache Camel: Improper Input Validation vulnerability in Apache Camel Core component4.8 MediumN/AN/AOct 19, 2026
CVE-2026-85300: Apache Software Foundation Apache Camel: Incorrect Default Permissions vulnerability in Apache Camel PQC component5.5 MediumN/AN/AOct 19, 2026
CVE-2026-85301: Apache Software Foundation Apache Camel: Improper Authentication vulnerability in Apache Camel Keycloak component4.8 MediumN/AN/AOct 19, 2026
CVE-2026-85296: Apache Software Foundation Apache Camel: Exposure of Data Element to Wrong Session vulnerability in Apache Camel AS2 component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-85260: Apache Software Foundation Apache Camel: Insertion of Sensitive Information into Log File vulnerability in Apache Camel MLLP component5.5 MediumN/AN/AOct 19, 2026
CVE-2026-85257: Apache Software Foundation Apache Camel: Generation of Error Message Containing Sensitive Information vulnerability in Apache Camel CXF component5.3 MediumN/AN/AOct 19, 2026
CVE-2026-85254: Apache Software Foundation Apache Camel: Improper Handling of Case Sensitivity vulnerability in Apache Camel Platform HTTP component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-71253: Apache Software Foundation Apache Johnzon: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache JohnzonN/AN/AN/AOct 19, 2026
CVE-2026-85251: Apache Software Foundation Apache Camel: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel HTTP component7.5 HighN/AN/AOct 19, 2026
CVE-2026-85250: Apache Software Foundation Apache Camel: Improper Restriction of XML External Entity Reference vulnerability in Apache Camel XPath component7.5 HighN/AN/AOct 19, 2026
CVE-2026-85249: Apache Software Foundation Apache Camel: Improper Input Validation vulnerability in Apache Camel Tika component6.5 MediumN/AN/AOct 19, 2026
CVE-2026-85248: Apache Software Foundation Apache Camel: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache…5.9 MediumN/AN/AOct 19, 2026
CVE-2026-85247: Apache Software Foundation Apache Camel: Improper Certificate Validation vulnerability in Apache Camel Knative component5.9 MediumN/AN/AOct 19, 2026
CVE-2026-90910: Apache Software Foundation Apache Answer: Missing authentication for critical function vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-86589: Apache Software Foundation Apache Answer: Incorrect implementation of authentication algorithm vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79633: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79624: Apache Software Foundation Apache Answer: Insufficient session expiration vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79620: Apache Software Foundation Apache Answer: Exposure of sensitive information through data queries vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79613: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-76994: Apache Software Foundation Apache Answer: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-71563: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
51-75 of 409174