The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-106036: Krajowa Izba Rozliczeniowa Szafir: Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS…N/A6.9 MediumN/AOct 29, 2026
CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104331: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)5.4 MediumN/AN/AOct 29, 2026
CVE-2026-104328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104316: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104315: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104314: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker with a read or share grant on a target flow…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104312: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive…6.8 MediumN/AN/AOct 29, 2026
CVE-2026-104310: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104308: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to cause a denial of service due to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-103092: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary SQL commands due…8.8 HighN/AN/AOct 29, 2026
CVE-2026-102590: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due…7.7 HighN/AN/AOct 29, 2026
CVE-2026-101288: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2025-13050: Centreon: Broken Function Level Authorization allows execution of poller post-restart commands by authenticated user5.4 MediumN/AN/AOct 29, 2026
CVE-2026-88078: Microsoft Microsoft Edge (Chromium-based): Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-88077: Microsoft Microsoft Edge (Chromium-based): Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96196: Microsoft Microsoft Edge (Chromium-based): Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96187: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…7.4 HighN/AN/AOct 29, 2026
CVE-2026-85899: Microsoft Microsoft Edge (Chromium-based): Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.8.1 HighN/AN/AOct 29, 2026
CVE-2026-85330: Microsoft Microsoft Edge (Chromium-based): Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-88090: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…5.4 MediumN/AN/AOct 29, 2026
CVE-2026-114148: Microsoft: Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.7.8 HighN/AN/AOct 29, 2026
926-950 of 418318