The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-112102: AXA Group NLP.js: A vulnerability was detected in AXA Group NLP.js 4.27.06.3 Medium5.3 MediumN/AOct 19, 2026
CVE-2026-90910: Apache Software Foundation Apache Answer: Missing authentication for critical function vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-86589: Apache Software Foundation Apache Answer: Incorrect implementation of authentication algorithm vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79633: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79624: Apache Software Foundation Apache Answer: Insufficient session expiration vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79620: Apache Software Foundation Apache Answer: Exposure of sensitive information through data queries vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-79613: Apache Software Foundation Apache Answer: vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-76994: Apache Software Foundation Apache Answer: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-71563: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-68482: Apache Software Foundation Apache Answer: Missing Authorization vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-67249: Apache Software Foundation Apache Answer: A vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-64945: Apache Software Foundation Apache Answer: A vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-112101: BlackBeltTechnology pi-agent-dashboard: A vulnerability was determined in BlackBeltTechnology pi-agent-dashboard up to 0.8.04.3 Medium5.3 MediumN/AOct 19, 2026
CVE-2026-112192: MISP: MISP contains a vulnerability in the handling of module plugin settingsN/A5.3 MediumN/AOct 19, 2026
CVE-2026-64944: Apache Software Foundation Apache Answer: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-64943: Apache Software Foundation Apache Answer: Insertion of Sensitive Information into Log File vulnerability in Apache AnswerN/AN/AN/AOct 19, 2026
CVE-2026-112188: MISP: MISP contains a vulnerability in its server settings lookup mechanism that allows an authenticated user to retrieve…N/A7.1 HighN/AOct 19, 2026
CVE-2026-108837: Apache Software Foundation Apache Kylin: Allocation of resources without limits or throttling vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108833: Apache Software Foundation Apache Kylin: Default startup profile miss security settings in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108823: Apache Software Foundation Apache Kylin: Exposure of Sensitive Information to an Unauthorized Actor during job manipulation in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108780: Apache Software Foundation Apache Kylin: Potential JDBC source configuration validation vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108776: Apache Software Foundation Apache Kylin: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108771: Apache Software Foundation Apache Kylin: Missing authentication for in-house broadcast and polymorphic deserialization vulnerability in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-108766: Apache Software Foundation Apache Kylin: Missing authorization on jdbc source config update in Apache KylinN/AN/AN/AOct 19, 2026
CVE-2026-112184: MISP: MISP contains a reflected cross-site scripting (XSS) vulnerability in the workflow module interfaceN/A4.8 MediumN/AOct 19, 2026
1-25 of 409174
›