The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108837: Apache Software Foundation Apache Kylin: Allocation of resources without limits or throttling vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108833: Apache Software Foundation Apache Kylin: Default startup profile miss security settings in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108823: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108780: Apache Software Foundation Apache Kylin: Potential JDBC source configuration validation vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108776: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108771: Apache Software Foundation Apache Kylin: Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108766: Apache Software Foundation Apache Kylin: Missing authorization on jdbc source config update in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108764: Apache Software Foundation Apache Kylin: Server-Side request forgery (SSRF) vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108762: Apache Software Foundation Apache Kylin: Path-confinement bypass during metadata backup deletion in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-79985: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel SMB…7.4 HighN/AN/AOct 19, 2026
CVE-2026-79984: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel Mina SFTP…7.4 HighN/AN/AOct 19, 2026
CVE-2026-79983: Apache Software Foundation Apache Camel: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Camel FTP…7.4 HighN/AN/AOct 19, 2026
CVE-2026-78165: Apache Software Foundation Apache Camel: Deserialization of Untrusted Data vulnerability in Apache Camel Spring Redis component8.8 HighN/AN/AOct 19, 2026
CVE-2026-108121: Koozali SME Server: Brian Mariani from DigitalCanion SA has discovered a vulnerability in the domain creation functionality of koozali's…N/A6.9 Medium0%Oct 19, 2026
CVE-2026-69080: Apache Software Foundation Apache Kylin: Exposure of SQL Black List to an Unauthorized Actor vulnerability in Apache Kylin7.5 HighN/A0%Oct 16, 2026
CVE-2026-69077: Apache Software Foundation Apache Kylin: Exposure of unauthorized cross-project job manipulation vulnerability in Apache Kylin7.5 HighN/A0%Oct 16, 2026
CVE-2026-69076: Apache Software Foundation Apache Kylin: Exposure of Job Discard to an Unauthorized Actor vulnerability in Apache Kylin7.5 HighN/A0%Oct 16, 2026
CVE-2026-108709: Apache Software Foundation Apache Kylin: Authentication bypass within in-house network in Apache Kylin9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-108743: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache KylinN/AN/A1%Oct 16, 2026
CVE-2026-68573: Apache Software Foundation Apache Kylin: Improper Authentication vulnerability in Apache KylinN/AN/A0%Oct 16, 2026
CVE-2026-68572: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache KylinN/AN/A0%Oct 16, 2026
CVE-2026-68571: Apache Software Foundation Apache Kylin: Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Kylin8.8 HighN/A0%Oct 16, 2026
CVE-2026-64959: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'), Missing Authentication for…9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-64610: Apache Software Foundation Apache Kylin: Deserialization of Untrusted Data vulnerability in Apache Kylin9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-63619: Apache Software Foundation Apache Kylin: Missing Authorization vulnerability in Apache Kylin9.1 CriticalN/A0%Oct 16, 2026
76-100 of 4390
‹›