The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-111732: RT-Labs P-Net: P-Net before 1.0.3, when built with PNET_OPTION_AR_VENDOR_BLOCKS enabled, parses a data length from a field of the…N/A9.3 CriticalN/AOct 29, 2026
CVE-2026-111731: RT-Labs P-Net: P-Net before 1.0.3 enters an infinite loop when handling a read request for the PDPortDataCheck record with subslot 0…N/A8.7 HighN/AOct 29, 2026
CVE-2026-111730: RT-Labs P-Net: P-Net before 1.0.3 does not validate the LengthPeerStationName field of a CheckPeers block in get_check_peer()N/A7.2 HighN/AOct 29, 2026
CVE-2026-110309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110245: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper…7.5 HighN/AN/AOct 29, 2026
CVE-2026-110244: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110200: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110196: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110193: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110192: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110190: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110186: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-109891: weDevs Happy Addons for Elementor: Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting…6.4 MediumN/AN/AOct 29, 2026
CVE-2026-108494: Bob Chained Quiz: Unauthenticated Cross Site Scripting (XSS) in Chained Quiz <= 1.4.1 versions.7.1 HighN/AN/AOct 29, 2026
CVE-2026-107329: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107327: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107326: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-107042: n/a: Insecure permissions in USP Ultimate Screenshot Painter versionCode 240213.009 allows unauthorized attackers to move or…N/AN/AN/AOct 29, 2026
CVE-2026-107041: n/a: Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized…N/AN/AN/AOct 29, 2026
CVE-2026-107040: n/a: Insecure permissions in MBasov OMN-Go versionCode 26080824 allows unauthorized attackers to invoke an exported…N/AN/AN/AOct 29, 2026
CVE-2026-107039: n/a: Insecure permissions in the ActivityMain component of M66B/Marcel Bokhorst NetGuard no-root firewall versionCode…N/AN/AN/AOct 29, 2026
CVE-2026-107038: n/a: Insecure permissions in Yet Another UPnP Controller versionCode 50200 allows unauthorized attackers to invoke an…N/AN/AN/AOct 29, 2026
CVE-2026-107037: n/a: Insecure permissions in the NotificationHelper component of NoNonsense Notes versionCode 72600 allows unauthorized…N/AN/AN/AOct 29, 2026
CVE-2026-107036: n/a: Insecure permissions in Mission Control / AIMSICD versionCode 2026080501 allows unauthorized attackers to invoke an…N/AN/AN/AOct 29, 2026
151-175 of 538495