The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107058: Improper Authentication9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-107057: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107056: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107055: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107053: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107052: Incorrect Default Permissions7.5 HighN/AN/AOct 29, 2026
CVE-2026-107051: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107050: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107049: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107048: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107047: Incorrect Permission Assignment for Critical Resource7.5 HighN/AN/AOct 29, 2026
CVE-2026-107046: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107045: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107044: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107043: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2025-12523: Missing Authorization6.5 MediumN/AN/AOct 29, 2026
CVE-2023-7357: Inclusion of Functionality from Untrusted Control SphereN/A8.6 HighN/AOct 29, 2026
CVE-2026-96192: Microsoft Microsoft Edge (Chromium-based): Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 29, 2026
CVE-2026-93680: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-93571: Krajowa Izba Rozliczeniowa Szafir: Szafir is vulnerable to Path Traversal in the uploaded filenameN/A2.3 LowN/AOct 29, 2026
CVE-2026-93570: Krajowa Izba Rozliczeniowa: Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injectionN/A8.2 HighN/AOct 29, 2026
CVE-2026-90991: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to cause a denial of service due to…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-90872: Progress Software WS_FTP Server: Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software…6.6 MediumN/AN/AOct 29, 2026
CVE-2026-90871: Progress Software WS_FTP Server: Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-90870: Progress Software WS_FTP Server: A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server…5.3 MediumN/AN/AOct 29, 2026
876-900 of 415097