The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-121351: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121350: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…7.7 HighN/AN/ANov 10, 2026
CVE-2026-121349: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-119017: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-118484: Adobe: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-118483: Adobe Adobe Dimension: Dimension is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in…8.2 HighN/AN/ANov 10, 2026
CVE-2026-118482: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118481: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118480: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118479: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118478: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118197: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-114372: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-114371: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-113580: Adobe: Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-113579: Adobe: Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-113574: Adobe: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-113573: Adobe: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-113572: Adobe: CAI Content Credentials is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-107356: U.S. Geological Survey Area Species Management Research Program: U.S8.8 High8.7 HighN/ANov 10, 2026
CVE-2026-105150: woobewoo Product Filter for WooCommerce by WBW: The Product Filter for WooCommerce by WBW plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…6.1 MediumN/AN/ANov 10, 2026
CVE-2025-62621: AMD: Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-62620: AMD: Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54508: AMD: Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54506: AMD: A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware…N/A4.0 MediumN/ANov 10, 2026
76-100 of 557027