The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-123084: Red Hat: An **expression language injection** has been found in the HeaderContentGuard.permit function in publication.py of the…6.5 MediumN/AN/ANov 10, 2026
CVE-2026-118481: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-114372: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-123341: Adobe Adobe Experience Manager as a Cloud Service: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-121904: Adobe Adobe Connect: Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-92544: Kong Inc.: SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute…N/A8.7 HighN/ANov 10, 2026
CVE-2026-82012: Out-of-bounds Write7.8 HighN/AN/ANov 10, 2026
CVE-2026-113573: Adobe: CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-123262: Adobe: CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could…5.9 MediumN/AN/ANov 10, 2026
CVE-2026-122099: Adobe: CAI Content Credentials is affected by an Incorrect Authorization vulnerability that could result in a Security feature…2.9 LowN/AN/ANov 10, 2026
CVE-2026-126128: Auth0 Auth0 Node JS: The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its…N/AN/AN/ANov 10, 2026
CVE-2026-126084: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126083: rails: Action Pack is a framework for handling and responding to web requests7.4 HighN/AN/ANov 10, 2026
CVE-2026-126082: Rejected reason: This CVE is a duplicate of another CVE.N/AN/AN/ANov 10, 2026
CVE-2026-126081: rails: Action Pack is a framework for handling and responding to web requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-126080: rails: Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects7.5 HighN/AN/ANov 10, 2026
CVE-2026-126079: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126077: rails: Action Pack is a framework for handling and responding to web requests6.8 MediumN/AN/ANov 10, 2026
CVE-2026-126076: rails: Action Pack is a framework for handling and responding to web requests4.2 MediumN/AN/ANov 10, 2026
CVE-2026-126075: rails: Active Support is a collection of utility classes and standard library extensions used by Rails and other Ruby projects4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126074: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.3 MediumN/AN/ANov 10, 2026
CVE-2026-126072: rails: Action Pack is a framework for handling and responding to web requests5.9 MediumN/AN/ANov 10, 2026
CVE-2026-126071: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-126069: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126068: rails: Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails3.7 LowN/AN/ANov 10, 2026
1051-1075 of 433023