The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-120015: SAP_SE SAP Host Agent: SAP Host Agent does not sufficiently validate certain inputs7.5 HighN/AN/ANov 10, 2026
CVE-2026-120014: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP HANA XSA Web Dispatcher does not perform sufficient request validation in certain administrative functionality7.6 HighN/AN/ANov 10, 2026
CVE-2026-120010: SAP_SE SAP NetWeaver Application Server (SAP Message Server): SAP NetWeaver Application Server (SAP Message Server) does not properly size memory allocations when handling certain…7.5 HighN/AN/ANov 10, 2026
CVE-2026-120009: SAP_SE SAP ABAP Developer Tools (AMDP Data Preview): SAP ABAP Developer Tools (AMDP Data Preview) does not perform sufficient validation and authorization checks within…7.2 HighN/AN/ANov 10, 2026
CVE-2026-120008: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests8.2 HighN/AN/ANov 10, 2026
CVE-2026-109811: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has SSRF vulnerability due…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-109810: SAP_SE SAP NetWeaver Application Server Java (Web Dynpro Java): SAP NetWeaver Application Server Java (Web Dynpro Java) does not sufficiently validate certain request parameters used…6.1 MediumN/AN/ANov 10, 2026
CVE-2026-109809: SAP_SE SAP NetWeaver Application Server Java (NWDI Cockpit): SAP NetWeaver Application Server Java (NWDI Cockpit) does not perform sufficient authorization checks for certain…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-109808: SAP_SE SAP Solution Tools Plug-In (ST-PI): Due to a missing authorization check in certain remote-enabled functionality, SAP Solution Tools Plug-In allows an…3.1 LowN/AN/ANov 10, 2026
CVE-2026-109807: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-109806: SAP_SE SAP NetWeaver (Internet Graphics Service): SAP NetWeaver (Internet Graphics Service) does not sufficiently validate certain input values within incoming requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-109805: SAP_SE SAP NetWeaver and ABAP Platform (Application Server ABAP): Due to a weak HMAC cryptography calculation when receiving an RFC callback in SAP NetWeaver and ABAP Platform…6.4 MediumN/AN/ANov 10, 2026
CVE-2026-109804: SAP_SE SAP NetWeaver (SAP Message Server): SAP Message Server does not properly handle certain malformed requests, which could be leveraged by an unauthenticated…7.5 HighN/AN/ANov 10, 2026
CVE-2026-109803: SAP_SE SAP NetWeaver Knowledge Management (XML Forms): SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-109802: SAP_SE SAP NetWeaver Application Server for ABAP: SAP NetWeaver Application Server for ABAP does not properly validate certain input values6.5 MediumN/AN/ANov 10, 2026
CVE-2026-109801: SAP_SE SAP NetWeaver Application Server Java (NWDI Cockpit): SAP NetWeaver Application Server Java (NWDI Cockpit)� does not perform sufficient authorization checks for certain…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-109800: SAP_SE SAP Web Dispatcher: SAP Web Dispatcher does not sufficiently validate certain inputs during processing, which could lead to memory…7.7 HighN/AN/ANov 10, 2026
CVE-2026-109799: SAP_SE SAP Cloud SDK for Python: The SAP Cloud SDK for Python contains an improper cryptographic signature verification vulnerability (CWE-347) in…7.5 HighN/AN/ANov 10, 2026
CVE-2026-109798: SAP_SE SAP BusinessObjects Business Intelligence Platform (Web Intelligence): SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity…9.1 CriticalN/AN/ANov 10, 2026
CVE-2026-109797: SAP_SE SAP/astonish: In SAP/astonish, an authenticated user could potentially identify and operate on another team�s sandbox containers…7.1 HighN/AN/ANov 10, 2026
CVE-2026-109796: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not properly initialize memory in certain internal…4.3 MediumN/AN/ANov 10, 2026
CVE-2026-109795: SAP_SE S4CRM: SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-109794: SAP_SE: SAP NetWeaver Application Server ABAP, ABAP Platform, and SAP Web Dispatcher do not sufficiently handle resource…7.5 HighN/AN/ANov 10, 2026
CVE-2026-109793: SAP_SE SAP NetWeaver Application Server ABAP (Internet Communication Manager) and SAP Web Dispatcher: SAP NetWeaver Application Server ABAP and SAP Web Dispatcher do not sufficiently validate certain header values…7.5 HighN/AN/ANov 10, 2026
CVE-2026-107246: WebPros Plesk extension "Site Import": The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing…N/A9.2 CriticalN/ANov 10, 2026
76-100 of 427771
‹›