The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-105489: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105477: Veeam Agent for Linux: A vulnerability in Veeam Agent for Linux allows for local privilege escalationN/A7.3 HighN/AOct 27, 2026
CVE-2026-104354: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL…9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-104353: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104351: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability…9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104350: Adobe Adobe Campaign Classic: Adobe Campaign Classic (ACC) is affected by a reflected Cross-Site Scripting (XSS) vulnerability9.3 CriticalN/AN/AOct 27, 2026
CVE-2026-104349: Adobe Creative Cloud Desktop Application: Creative Cloud Desktop is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary…7.3 HighN/AN/AOct 27, 2026
CVE-2026-102638: Autodesk Fusion: A maliciously crafted HTML payload in the description of an electronic library (.lbr) file, when displayed in the…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102637: Autodesk Fusion: A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is…7.1 HighN/AN/AOct 27, 2026
CVE-2026-102636: Autodesk Fusion: A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design,…7.1 HighN/AN/AOct 27, 2026
CVE-2025-64394: Veeam Backup for Microsoft 365: A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the…N/A4.3 MediumN/AOct 27, 2026
CVE-2026-93866: WatchGuard Fireware OS: An integer overflow vulnerability in the WebSocket connection handling used by WatchGuard Fireware OS's Access Portal…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93865: WatchGuard Fireware OS: A missing authentication vulnerability in the Fireware OS FireCluster synchronization daemon allows a remote,…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: WatchGuard Fireware OS: A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution…N/A7.1 HighN/AOct 27, 2026
CVE-2026-93862: WatchGuard Fireware OS: An out-of-bounds read vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A7.2 HighN/AOct 27, 2026
CVE-2026-93857: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in Fireware OS's SIP proxy allows a remote, unauthenticated attacker to…N/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93434: WatchGuard Fireware OS: An XPath injection vulnerability in WatchGuard Fireware OS's SSH authentication process allows a remote,…N/A8.7 HighN/AOct 27, 2026
CVE-2026-92377: TeamViewer: Improper access control in the Patch Management update mechanism of TeamViewer Full Client and Host for Windows prior…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92376: TeamViewer Remote Management - Monitoring: Improper authentication in the inter-process communication (IPC) mechanism of TeamViewer Remote Management Monitoring…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92375: TeamViewer: An improper access control vulnerability in the IPC communication between TeamViewer Full Client or Host prior to…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92374: TeamViewer: A time-of-check time-of-use (TOCTOU) race condition combined with improper symbolic link handling in the privileged…7.8 HighN/AN/AOct 27, 2026
CVE-2026-92372: TeamViewer Full Client: An out-of-bounds write vulnerability in the screen-image decoder of TeamViewer Full Client for Linux and macOS prior to…8.8 HighN/AN/AOct 27, 2026
CVE-2026-90465: WatchGuard Fireware OS: A missing authentication vulnerability in the FireCluster Sync processing allows an attacker positioned on the cluster…N/A9.4 CriticalN/AOct 27, 2026
CVE-2026-90464: WatchGuard Fireware OS: An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,…N/A7.2 HighN/AOct 27, 2026
CVE-2026-90442: WatchGuard Fireware OS: A stack-based buffer overflow vulnerability in the Fireware OS certd process allows an authenticated attacker with…N/A8.6 HighN/AOct 27, 2026
151-175 of 522616