The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-115707: Elastic Elastic Cloud Enterprise: Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-538) in Elastic Cloud Enterprise…6.4 MediumN/AN/AOct 29, 2026
CVE-2026-115706: Elastic Elastic Cloud Enterprise: Authorization Bypass Through User-Controlled Key (CWE-639) in Elastic Cloud Enterprise (ECE) can lead to privilege…6.8 MediumN/AN/AOct 29, 2026
CVE-2026-115610: PublishPress PublishPress Authors: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-115605: Brainstorm Force SureDash: Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-115601: WP Desk Custom Price for WooCommerce: Missing Authorization vulnerability in WP Desk Custom Price for WooCommerce custom-price-for-woocommerce allows…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-114706: WP Chill Strong Testimonials: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Strong…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104316: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to cancel any victim's running background…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-114181: Magepeople inc. Taxi Booking Manager for WooCommerce: Missing Authorization vulnerability in Magepeople inc5.3 MediumN/AN/AOct 29, 2026
CVE-2026-110881: Brainstorm Force SureDash: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-107024: n/a: Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite…N/AN/AN/AOct 29, 2026
CVE-2026-107023: n/a: Insecure permissions in the ContentProvider component of mhss1 MyBrain v3.1.0 allows unauthorized attackers to…N/AN/AN/AOct 29, 2026
CVE-2026-107021: n/a: Insecure permissions in the CardProvider content provider component of helloworld1 AnyMemo versionCode 20260730 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107020: n/a: An issue in the activity.LoadLinkLaterActivity component of FeedEx / Handy News Reader versionCode 116 allows attackers…N/AN/AN/AOct 29, 2026
CVE-2026-107019: n/a: Insecure permissions in the feiertage.ImportActivity component of Arbeitszeiterfassung2 versionCode 159 allows…N/AN/AN/AOct 29, 2026
CVE-2026-107018: n/a: Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read…N/AN/AN/AOct 29, 2026
CVE-2026-107017: n/a: Insecure permissions in the ShortcutDispatchActivity component of canvoki versionCode 14 allows unauthorized attackers…N/AN/AN/AOct 29, 2026
CVE-2026-107016: n/a: Insecure permissions in Fossify v1.3.0 allows unauthorized attackers to access and read another user's stored contacts.N/AN/AN/AOct 29, 2026
CVE-2026-107015: n/a: Insecure permissions in Simple Contacts Pro versionCode 107 allow unauthorized attackers to write and read notes in…N/AN/AN/AOct 29, 2026
CVE-2026-107014: n/a: Insecure permissions in Bander Notepad (bander.notepad) versionCode 12 allow unauthorized attackers to write and read…N/AN/AN/AOct 29, 2026
CVE-2026-104317: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker who could reach the message broker to execute…8.1 HighN/AN/AOct 29, 2026
CVE-2026-104324: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-113576: Adobe Adobe Digital Editions: Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…6.3 MediumN/AN/AOct 29, 2026
CVE-2026-104328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-104331: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 is vulnerable to server-side request forgery (SSRF)5.4 MediumN/AN/AOct 29, 2026
CVE-2026-104339: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper…9.8 CriticalN/AN/AOct 29, 2026
176-200 of 538495