The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111551: Apache Software Foundation Apache Kafka: Several Kafka deserialization paths read a size or count field from input data and use it directly to allocate an…N/AN/AN/AOct 28, 2026
CVE-2026-111496: Apache Software Foundation Apache Kafka: Kafka Streams derives its stream-time clock from record timestampsN/AN/AN/AOct 28, 2026
CVE-2026-111115: Apache Software Foundation Apache Kafka: Apache Kafka's code-generated readers for flexible protocol versions read a tagged-field count declared by the sender…N/AN/AN/AOct 28, 2026
CVE-2026-111108: Apache Software Foundation Apache Kafka: Apache Kafka's code-generated protocol readers pre-size an array's collection from the element count declared by the…N/AN/AN/AOct 28, 2026
CVE-2026-111073: Apache Software Foundation Apache Kafka: The broker-side PushTelemetry API (KIP-714) validates only the compressed size of a client's metrics payload against…N/AN/AN/AOct 28, 2026
CVE-2026-110985: Apache Software Foundation Apache Kafka: A Kafka broker using SASL/OAUTHBEARER with the default validator…N/AN/AN/AOct 28, 2026
CVE-2026-110952: Apache Software Foundation Apache Kafka: A Kafka broker that authenticates clients with SASL/OAUTHBEARER using the bundled JWKS-backed validator always verifies…N/AN/AN/AOct 28, 2026
CVE-2026-58458: Klei Entertainment Don't Starve Together: Don't Starve Together (Steam AppID 322330) through build 747465 contains a memory-corruption vulnerability in the…6.5 Medium6.9 MediumN/AOct 28, 2026
CVE-2026-106079: Juniper Networks: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103506: Grafana: An authenticated user in Grafana can read SSO client secrets and modify instance-wide SSO settings without the required…N/A8.9 HighN/AOct 28, 2026
CVE-2026-103411: Juniper Networks Session Smart Router: An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session Smart Router allows an attacker…7.1 HighN/AN/AOct 28, 2026
CVE-2026-117501: Allocation of Resources Without Limits or ThrottlingN/AN/AN/AOct 28, 2026
CVE-2026-103410: Juniper Networks Session Smart Router: An Integer Overflow vulnerability in the DPI certificate scanner in Juniper Networks Session Smart Router allows an…7.5 HighN/AN/AOct 28, 2026
CVE-2026-103409: Juniper Networks Session Smart Router: A Missing authentication for critical function vulnerability in Juniper Networks Session Smart Router allows an…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-103408: Juniper Networks Session Smart Router: A Stack Buffer Overflow vulnerability in the DHCP client in Juniper Networks Session Smart Router allows an…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103407: Juniper Networks: An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103406: Juniper Networks Session Smart Conductor: An Improper Neutralization of Special Elements used in an OS Command vulnerability in the AutomatedProvisioner in…9.8 CriticalN/AN/AOct 28, 2026
CVE-2026-103405: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…5.8 MediumN/AN/AOct 28, 2026
CVE-2026-103404: Juniper Networks Session Smart Conductor: An Incorrect Permission Assignment for Critical Resource vulnerability in RoutingManager in Juniper Networks Session…6.8 MediumN/AN/AOct 28, 2026
CVE-2026-103403: Juniper Networks: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103402: Juniper Networks: An Insufficient Verification of Data Authenticity vulnerability in PCLI in Juniper Networks Session Smart Router and…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103401: Juniper Networks: An Improper Link Resolution Before File Access ('Link Following') vulnerability in the unauthenticated web server…8.8 HighN/AN/AOct 28, 2026
CVE-2026-103400: Juniper Networks: An Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in…5.5 MediumN/AN/AOct 28, 2026
CVE-2026-103394: Juniper Networks Session Smart Router: An Improper Initialization vulnerability in the SSR software in Juniper Networks Session Smart Router allows an…3.7 LowN/AN/AOct 28, 2026
CVE-2026-103393: Juniper Networks Session Smart Router: An Out-of-Bounds Read vulnerability in the VRRP implementation in Juniper Networks Session Smart Router allows an…4.3 MediumN/AN/AOct 28, 2026
201-225 of 413066