The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125125: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 10, 2026
CVE-2026-97891: Eclipse Foundation Eclipse Kura: In Eclipse Kura version 5.0.0 to 5.6.2, the Web Console allocates a new HTTP session for every request to its built-in…N/A8.8 HighN/ANov 10, 2026
CVE-2026-125124: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 10, 2026
CVE-2026-125123: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 10, 2026
CVE-2026-125122: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A2.3 LowN/ANov 10, 2026
CVE-2026-92684: Neo4j @neo4j/graphql: Missing Authentication for Critical Function in aggregation queries in Neo4j @neo4j/graphql 5.0.0 before 5.12.17 and…N/A8.7 HighN/ANov 10, 2026
CVE-2026-125121: tmatens compose-lint: compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deploymentN/A5.3 MediumN/ANov 10, 2026
CVE-2026-57907: WatchGuard Endpoint Security: A privilege escalation vulnerability in WatchGuard Endpoint Protection's inter-process communication between the…N/A8.5 HighN/ANov 10, 2026
CVE-2026-126042: vnotex VNote: VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as…7.0 High7.3 HighN/ANov 10, 2026
CVE-2026-63653: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware tool5.0 MediumN/AN/ANov 10, 2026
CVE-2026-63011: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware toolN/A9.4 CriticalN/ANov 10, 2026
CVE-2026-63010: Intermesh groupoffice: Group-Office is an enterprise customer relationship management and groupware toolN/A8.7 HighN/ANov 10, 2026
CVE-2026-115791: Python Software Foundation CPython: When tarfile or zipfile command line interface (CLI) is used to decompress an archive, a Python script shadowing the…N/A5.3 MediumN/ANov 10, 2026
CVE-2026-125271: AWS aws-api-mcp-server: Incorrect normalization of operation names in the custom security policy enforcement in awslabs aws-api-mcp-server…7.8 High8.5 HighN/ANov 10, 2026
CVE-2026-57884: n/a Intel(R) Graphics Software: Uncontrolled search path for some Intel(R) Graphics Software before version 26.14.2303.1 within Ring 3: User…N/A5.4 MediumN/ANov 10, 2026
CVE-2026-82518: Akamai Akamai CLI: Akamai CLI before 2.0.6 contains a path traversal vulnerability that allows malicious packages to write files outside…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-56438: n/a libva software: Uncontrolled search path for the libva software for all versions within Ring 3: User Applications may allow an…N/A5.4 MediumN/ANov 10, 2026
CVE-2026-50177: n/a Intel(R) Neural Compressor software: Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User…N/A4.8 MediumN/ANov 10, 2026
CVE-2026-50109: n/a Intel(R) Performance Counter Monitor (Intel(R) PCM): Out-of-bounds write for some Intel(R) Performance Counter Monitor (Intel(R) PCM) within Ring 3: User Applications may…N/A8.3 HighN/ANov 10, 2026
CVE-2026-49028: n/a Intel(R) Neural Compressor software: Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User…N/A4.8 MediumN/ANov 10, 2026
CVE-2026-46632: n/a Intel(R) Application Optimization User Interface: Uncontrolled search path for some Intel(R) Application Optimization User Interface within Ring 3: User Applications may…N/A5.4 MediumN/ANov 10, 2026
CVE-2026-44627: n/a Intel(R) oneAPI Deep Neural Network Library (oneDNN) software: Integer overflow to buffer overflow for some Intel(R) oneAPI Deep Neural Network Library (oneDNN) software before…N/A5.8 MediumN/ANov 10, 2026
CVE-2026-42966: n/a Intel(R) Neural Compressor software: Uncaught exception for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User Applications may…N/A4.8 MediumN/ANov 10, 2026
CVE-2026-42917: n/a Intel(R) Neural Compressor software: Deserialization of untrusted data for some Intel(R) Neural Compressor software before version 3.8 within Ring 3: User…N/A4.8 MediumN/ANov 10, 2026
CVE-2026-42067: n/a Intel(R) TDX Workload Attestation software: Improper certificate validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications…N/A5.9 MediumN/ANov 10, 2026
1-25 of 427654
›