The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-109090: x.org libXi: A malicious X server could cause a heap overflow by injecting a large DEVICE_ENABLE reply when processed by libXi…7.5 HighN/AN/AOct 27, 2026
CVE-2026-109089: X.Org libXi: A buffer overflow when handling DEVICE_RESOLUTION in libXi before 1.8.4 could overflow a heap, triggered by a malicious…7.5 HighN/AN/AOct 27, 2026
CVE-2026-109088: X.org libXtst: A malicious X server could send malformed RECORD EnableContext reolies that can cause a X client using the…6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108142: Veeam Backup and Replication: A vulnerability allowing an unauthenticated attacker to bypass authorization on the CDP Coordinator Service.N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-108141: Veeam Backup and Replication: A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a…N/A5.9 MediumN/AOct 27, 2026
CVE-2026-108140: Veeam Backup and Replication: A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a…N/A5.9 MediumN/AOct 27, 2026
CVE-2026-108015: HCLSoftware Notes Client: Private keys for eight eMudhra intermediate CA certificates have been compromised…N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-108014: HCLSoftware Domino Server: Private keys for eight eMudhra intermediate CA certificates have been compromised…N/A9.1 CriticalN/AOct 27, 2026
CVE-2026-107671: Veeam ONE: A vulnerability allowing an attacker with valid Administrator credentials to bypass multi-factor authentication by…N/A8.5 HighN/AOct 27, 2026
CVE-2026-106078: Veeam Backup for Microsoft 365: A vulnerability allowing an unauthenticated attacker to bypass REST API authentication with a forged federation token…N/A6.9 MediumN/AOct 27, 2026
CVE-2026-106077: Veeam Backup for Microsoft 365: A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on…N/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Veeam Backup for Microsoft 365: A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of…N/A9.0 CriticalN/AOct 27, 2026
CVE-2026-105781: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-105780: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105779: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-105489: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105477: Veeam Agent for Linux: A vulnerability in Veeam Agent for Linux allows for local privilege escalationN/A7.3 HighN/AOct 27, 2026
CVE-2026-104354: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-104353: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104351: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104350: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 27, 2026
CVE-2026-104349: Adobe Creative Cloud Desktop Application: Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary…7.3 HighN/AN/AOct 27, 2026
CVE-2026-102638: Autodesk Fusion: A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102637: Autodesk Fusion: A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102636: Autodesk Fusion: A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design,…7.1 HighN/AN/AOct 27, 2026
126-150 of 522616