The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-108140: Veeam Backup and Replication: A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a…N/A5.9 MediumN/AOct 27, 2026
CVE-2026-108014: HCLSoftware Domino Server: Private keys for eight eMudhra intermediate CA certificates have been compromised…N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-107671: Veeam ONE: A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by…N/A8.5 HighN/AOct 27, 2026
CVE-2026-106078: Veeam Backup for Microsoft 365: A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token…N/A6.9 MediumN/AOct 27, 2026
CVE-2026-106077: Veeam Backup for Microsoft 365: A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on…N/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Veeam Backup for Microsoft 365: A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of…N/A9.0 CriticalN/AOct 27, 2026
CVE-2026-105781: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-105780: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105779: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-105489: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105477: Veeam Agent for Linux: A vulnerability in Veeam Agent for Linux allows for local privilege escalationN/A7.3 HighN/AOct 27, 2026
CVE-2026-104354: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-104353: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104351: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104350: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 27, 2026
CVE-2026-104349: Adobe Creative Cloud Desktop Application: Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary…7.3 HighN/AN/AOct 27, 2026
CVE-2026-102638: Autodesk Fusion: A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102637: Autodesk Fusion: A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102636: Autodesk Fusion: A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design,…7.1 HighN/AN/AOct 27, 2026
CVE-2025-64394: Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the…N/A4.3 MediumN/AOct 27, 2026
CVE-2026-108015: HCLSoftware Notes Client: Private keys for eight eMudhra intermediate CA certificates have been compromised…N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-93866: WatchGuard Fireware OS: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93865: WatchGuard Fireware OS: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: WatchGuard Fireware OS: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution…N/A7.1 HighN/AOct 27, 2026
CVE-2026-93862: WatchGuard Fireware OS: An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A7.2 HighN/AOct 27, 2026
126-150 of 522616