The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-106077: Veeam Backup for Microsoft 365: A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on…N/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Veeam Backup for Microsoft 365: A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of…N/A9.0 CriticalN/AOct 27, 2026
CVE-2026-105781: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-105780: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105779: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-105489: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105477: Veeam Agent for Linux: A vulnerability in Veeam Agent for Linux allows for local privilege escalationN/A7.3 HighN/AOct 27, 2026
CVE-2026-104353: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104351: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104350: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 27, 2026
CVE-2026-104349: Adobe Creative Cloud Desktop Application: Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary…7.3 HighN/AN/AOct 27, 2026
CVE-2026-102638: Autodesk Fusion: A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102637: Autodesk Fusion: A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102636: Autodesk Fusion: A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design,…7.1 HighN/AN/AOct 27, 2026
CVE-2025-64394: Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the…N/A4.3 MediumN/AOct 27, 2026
CVE-2026-117515: oretnom23 php-travel-agency-system: A security flaw has been discovered in oretnom23 php-travel-agency-system 4e28b8f84d72420373dd15c3ae32900beb7e06357.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-104354: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-57189: asterisk: Asterisk is an open source private branch exchange and telephony toolkitN/A2.3 LowN/AOct 27, 2026
CVE-2026-116675: tinymce: TinyMCE is an open source rich text editorN/A8.5 HighN/AOct 27, 2026
CVE-2026-116673: sebhildebrandt systeminformation: systeminformation is a System and OS information library for node.js3.3 LowN/AN/AOct 27, 2026
CVE-2026-117512: oretnom23 php-travel-agency-system: A vulnerability was found in oretnom23 php-travel-agency-system7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-48380: Adobe Adobe Substance 3D Painter: Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive…5.5 MediumN/AN/AOct 27, 2026
CVE-2026-93866: WatchGuard Fireware OS: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93865: WatchGuard Fireware OS: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: WatchGuard Fireware OS: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution…N/A7.1 HighN/AOct 27, 2026
826-850 of 417096