The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-115640: LimeSurvey LimeSurvey Community Edition: LimeSurvey Community Edition 7.7.0 contains a stored cross-site scripting vulnerability in the Central Participants…N/A7.4 HighN/ANov 10, 2026
CVE-2026-112125: Hitachi HA Monitor: Incorrect Permission Assignment for Critical Resource Vulnerability in HA Monitor7.3 HighN/AN/ANov 10, 2026
CVE-2026-125612: Deltaww DIAEnergie: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww…8.8 HighN/AN/ANov 10, 2026
CVE-2026-88708: ASUS Router firmware: An off-by-one error in certain ASUS Router firmware allows an unauthenticated nearby user to send a packet with a…N/A5.3 MediumN/ANov 10, 2026
CVE-2026-88707: ASUS Router firmware: An out-of-bounds write in certain ASUS Router firmware allows an unauthenticated nearby user to send an HTTP request…N/A7.1 HighN/ANov 10, 2026
CVE-2026-88710: ASUS Router firmware: Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an…N/A8.7 HighN/ANov 10, 2026
CVE-2026-88709: ASUS Router firmware: Improper neutralization of special elements used in an OS command in certain ASUS Router firmware allows an user with…N/A7.0 HighN/ANov 10, 2026
CVE-2026-89131: SAP_SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal does not sufficiently protect certain server-side actions against cross-site request…4.3 MediumN/AN/ANov 10, 2026
CVE-2026-89129: SAP_SE SAP NetWeaver AS Java (Web Services): Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS Java (Web Services), an unauthenticated…5.8 MediumN/AN/ANov 10, 2026
CVE-2026-89128: SAP_SE SAP NetWeaver AS Java (Process Integration Test Tool): Due to Broken Access Control in SAP NetWeaver AS Java, an unauthenticated attacker could invoke affected SOAP…5.3 MediumN/AN/ANov 10, 2026
CVE-2026-89126: SAP_SE SAP Web Dispatcher: SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-89125: SAP_SE SAP Web Dispatcher and Internet Communication Manager: Due to Insecure Storage of Sensitive Information in SAP Web Dispatcher and Internet Communication Manager, an attacker…6.0 MediumN/AN/ANov 10, 2026
CVE-2026-89119: SAP_SE SAP Web Dispatcher and Internet Communication Manager: SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient…9.6 CriticalN/AN/ANov 10, 2026
CVE-2026-89115: SAP_SE SAP Start Service and SAP Microsoft Management Console: SAP Start Service and SAP Management Console store sensitive credential information in process memory without protection4.4 MediumN/AN/ANov 10, 2026
CVE-2026-89114: SAP_SE SAP NetWeaver AS Java EDM Application: SAP NetWeaver AS Java EDM Application does not perform an authentication check for certain web service requests7.5 HighN/AN/ANov 10, 2026
CVE-2026-89103: SAP_SE SAP Gateway: SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-76973: SAP_SE SAP NetWeaver and ABAP Platform (SAP Message Server): Due to a Memory Corruption vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform, an…7.5 HighN/AN/ANov 10, 2026
CVE-2026-76970: SAP_SE SAP NetWeaver and ABAP Platform: Due to a Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform, an…7.5 HighN/AN/ANov 10, 2026
CVE-2026-76966: SAP_SE SAP NetWeaver and ABAP Platform: Due to improper RFC protocol validation in the SAP Kernel used by the Application Server ABAP of SAP NetWeaver and ABAP…8.9 HighN/AN/ANov 10, 2026
CVE-2026-76965: SAP_SE SAP NetWeaver and ABAP Platform: SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-76964: SAP_SE SAP NetWeaver AS ABAP (Internet Communication Manager): SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal…10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-125087: Michael-A-Kuykendall Shimmy: A vulnerability was found in Michael-A-Kuykendall Shimmy up to 2.6.47.3 High5.5 MediumN/ANov 10, 2026
CVE-2026-125086: D-Link M60: A vulnerability has been found in D-Link M60 1.12.B0110.0 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-125082: sunkaifei FlyCMS: A security flaw has been discovered in sunkaifei FlyCMS up to e71738e0cfb7ffd48c2ce74242a2dbb43f84f25a3.5 Low2.0 LowN/ANov 10, 2026
CVE-2026-125079: D-Link DCS-6501LH: A vulnerability was determined in D-Link DCS-6501LH 3.03.025.3 Medium5.5 MediumN/ANov 10, 2026
201-225 of 427771
‹›