The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107326: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-107327: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107328: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-107329: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to…9.9 CriticalN/AN/AOct 29, 2026
CVE-2026-110186: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper control…9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-110190: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110192: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110193: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110196: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker with a low-privileged authenticated account to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110200: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-110244: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due…8.8 HighN/AN/AOct 29, 2026
CVE-2026-110245: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote attacker to obtain sensitive information due to improper…7.5 HighN/AN/AOct 29, 2026
CVE-2026-110309: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary commands due to…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96199: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96198: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-85897: Microsoft Microsoft Edge (Chromium-based): Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-85890: Microsoft Microsoft Edge (Chromium-based): Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.8.8 HighN/AN/AOct 29, 2026
CVE-2026-106036: Krajowa Izba Rozliczeniowa Szafir: Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS…N/A6.9 MediumN/AOct 29, 2026
CVE-2026-93571: Krajowa Izba Rozliczeniowa Szafir: Szafir is vulnerable to Path Traversal in the uploaded filenameN/A2.3 LowN/AOct 29, 2026
CVE-2026-93570: Krajowa Izba Rozliczeniowa: Szafir and Szafir Weryfikująca are vulnerable to XML External Entity (XXE) injectionN/A8.2 HighN/AOct 29, 2026
CVE-2026-42694: Themeum Kirki: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Kirki kirki…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-48200: Barn2 Plugins Document Library Lite: Insertion of Sensitive Information Into Sent Data vulnerability in Barn2 Plugins Document Library Lite…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-116848: POSIMYTH Innovations The Plus Addons for Elementor Page Builder Lite: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in POSIMYTH…6.5 MediumN/AN/AOct 29, 2026
CVE-2026-109891: weDevs Happy Addons for Elementor: Missing Authorization vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Exploiting…6.4 MediumN/AN/AOct 29, 2026
CVE-2026-93010: Red Hat: A flaw was found in dnsmasq4.3 MediumN/AN/AOct 29, 2026
201-225 of 538495