The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104316: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104315: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104314: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104312: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive…6.8 MediumN/AN/AOct 29, 2026
CVE-2026-104310: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104308: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…8.8 HighN/AN/AOct 29, 2026
CVE-2026-102590: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…7.7 HighN/AN/AOct 29, 2026
CVE-2026-101288: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2025-13050: Centreon: Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user5.4 MediumN/AN/AOct 29, 2026
CVE-2026-90872: Progress Software WS_FTP Server: Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software…6.6 MediumN/AN/AOct 29, 2026
CVE-2026-90868: Progress Software WS_FTP Server: An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-90867: Progress Software WS_FTP Server: Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and…8.1 HighN/AN/AOct 29, 2026
CVE-2026-90866: Progress Software WS_FTP Server: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90865: Progress Software WS_FTP Server: An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…9.0 CriticalN/AN/AOct 29, 2026
CVE-2026-90864: Progress Software WS_FTP Server: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90863: Progress Software WS_FTP Server: Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and…9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-90861: Progress Software WS_FTP Server: Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in…6.6 MediumN/AN/AOct 29, 2026
CVE-2026-84296: Progress Software WS_FTP Server: Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to…6.8 MediumN/AN/AOct 29, 2026
CVE-2026-84295: Progress Software WS_FTP Server: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…10.0 CriticalN/AN/AOct 29, 2026
CVE-2026-88077: Microsoft Microsoft Edge (Chromium-based): Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96196: Microsoft Microsoft Edge (Chromium-based): Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…8.8 HighN/AN/AOct 29, 2026
726-750 of 413289