The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-20549: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to improper input validationN/AN/AN/ANov 2, 2026
CVE-2026-20548: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to an integer overflowN/AN/AN/ANov 2, 2026
CVE-2026-20547: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20546: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to an incorrect bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20545: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-20499: MediaTek, Inc. MediaTek chipset: In Modem, there is a possible out of bounds write due to a missing bounds checkN/AN/AN/ANov 2, 2026
CVE-2026-120325: Webpro-nl Knip: A security vulnerability has been detected in Webpro-nl Knip up to 6.44.06.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120323: samanhappy MCPHub: A security flaw has been discovered in samanhappy MCPHub up to 1.0.45/1.1.74.3 Medium5.3 MediumN/ANov 2, 2026
CVE-2026-120322: Termix-SSH Termix: A vulnerability was identified in Termix-SSH Termix up to 2.9.29.9 Critical8.6 HighN/ANov 2, 2026
CVE-2026-120320: jxxghp MoviePilot: A vulnerability was determined in jxxghp MoviePilot up to 3.1.24.7 Medium2.0 LowN/ANov 2, 2026
CVE-2026-120319: Sanluan PublicCMS: A vulnerability was found in Sanluan PublicCMS 4.x/5.x/6.x6.3 Medium2.1 LowN/ANov 2, 2026
CVE-2026-120283: Linksys E8450: A vulnerability was identified in Linksys E8450 1.2.00.36051610.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120282: WAVLINK WN536AX6-A: A vulnerability was determined in WAVLINK WN536AX6-A V2605079.9 Critical8.6 HighN/ANov 2, 2026
CVE-2026-120281: WAVLINK WN536AX6-A: A vulnerability was found in WAVLINK WN536AX6-A V26050710.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120280: WAVLINK WN536AX6-A: A vulnerability has been found in WAVLINK WN536AX6-A V26050710.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120279: WAVLINK WN536AX6-A: A flaw has been found in WAVLINK WN536AX6-A V26050710.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120278: WAVLINK WN536AX6-A: A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.05.3 Medium5.5 MediumN/ANov 2, 2026
CVE-2026-120277: WAVLINK WN536AX6-A: A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.010.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-120276: WAVLINK WN536AX6-A: A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.010.0 Critical9.3 CriticalN/ANov 2, 2026
CVE-2026-83559: Apache Software Foundation Apache Wicket: Improper encoding or escaping of output in Apache WicketN/A7.4 HighN/ANov 1, 2026
CVE-2026-83539: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.4 HighN/ANov 1, 2026
CVE-2026-82956: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.6 HighN/ANov 1, 2026
CVE-2026-120275: Shanghai Xi Yu Ji Zhi Technology Minimax Code: A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.85.5 Medium5.1 MediumN/ANov 1, 2026
CVE-2026-111089: Apache Software Foundation Apache Wicket: Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes…N/A7.6 HighN/ANov 1, 2026
CVE-2026-95863: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.6 HighN/ANov 1, 2026
76-100 of 420636