The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

TitleEitWModules
CVE-2026-122102: Adobe Adobe Connect: Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged…8.7 HighN/AN/ANov 10, 2026
CVE-2026-92544: Kong Inc.: SQL injection in the LLM usage counters of Kong Gateway Enterprise and Kong AI Gateway may allow a client to execute…N/A8.7 HighN/ANov 10, 2026
CVE-2026-82012: Out-of-bounds Write7.8 HighN/AN/ANov 10, 2026
CVE-2026-113574: Adobe: CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to…4.0 MediumN/AN/ANov 10, 2026
CVE-2026-126128: Auth0 Auth0 Node JS: The Management API client in the Auth0 Node.js SDK improperly neutralizes path parameters, allowing a request and its…N/AN/AN/ANov 10, 2026
CVE-2026-126083: rails: Action Pack is a framework for handling and responding to web requests7.4 HighN/AN/ANov 10, 2026
CVE-2026-126082: Rejected reason: This CVE is a duplicate of another CVE.N/AN/AN/ANov 10, 2026
CVE-2026-126081: rails: Action Pack is a framework for handling and responding to web requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-126079: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126078: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126077: rails: Action Pack is a framework for handling and responding to web requests6.8 MediumN/AN/ANov 10, 2026
CVE-2026-126074: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…4.3 MediumN/AN/ANov 10, 2026
CVE-2026-126073: rails: Action Pack is a framework for handling and responding to web requests4.8 MediumN/AN/ANov 10, 2026
CVE-2026-126072: rails: Action Pack is a framework for handling and responding to web requests5.9 MediumN/AN/ANov 10, 2026
CVE-2026-126071: rails: Active Storage makes it simple to upload and reference files in cloud services and attach those files to Active Record…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-126070: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML6.1 MediumN/AN/ANov 10, 2026
CVE-2026-126069: rails: Action View is a framework for handling view template lookup and rendering and provides view helpers for building HTML4.7 MediumN/AN/ANov 10, 2026
CVE-2026-126068: rails: Action Mailbox routes incoming emails to controller-like mailboxes for processing in Rails3.7 LowN/AN/ANov 10, 2026
CVE-2026-126067: rails: Action Pack is a framework for handling and responding to web requests3.1 LowN/AN/ANov 10, 2026
CVE-2026-126066: NaturalIntelligence fast-xml-parser: fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks3.7 LowN/AN/ANov 10, 2026
CVE-2026-126065: openobserve: OpenObserve is a cloud-native observability platform9.8 CriticalN/AN/ANov 10, 2026
CVE-2026-126064: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming languageN/A2.0 LowN/ANov 10, 2026
CVE-2026-126063: sparklemotion nokogiri: Nokogiri is an open source XML and HTML library for the Ruby programming languageN/A2.3 LowN/ANov 10, 2026
CVE-2026-120828: MongoDB MongoDB Server: A replica-set database server node does not limit or reclaim internal wait records created while handling a…7.5 High8.7 HighN/ANov 10, 2026
CVE-2026-120826: MongoDB MongoDB Server: An authorization flaw in the aggregation and view-definition handling of sharded deployments may allow a user holding…6.5 Medium7.1 HighN/ANov 10, 2026
1076-1100 of 433023