The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-92558: Kong Inc.: The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator…N/A6.3 MediumN/ANov 10, 2026
CVE-2025-0027: AMD: Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-29940: AMD: Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-52537: AMD: Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-52535: AMD: Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54506: AMD: A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54503: AMD: Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54508: AMD: Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54504: AMD: Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-62620: AMD: Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-123041: Kong Inc.: The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client…N/A8.2 HighN/ANov 10, 2026
CVE-2025-62621: AMD: Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-92441: Kong Inc.: Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the…N/A7.8 HighN/ANov 10, 2026
CVE-2026-92439: Kong Inc.: The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for…N/A7.8 HighN/ANov 10, 2026
CVE-2026-96437: Kong Inc. Kong Gateway Enterprise: The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the…N/A8.2 HighN/ANov 10, 2026
CVE-2026-92443: Kong Inc.: The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying…N/A8.2 HighN/ANov 10, 2026
CVE-2026-121898: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121896: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121913: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation8.8 HighN/AN/ANov 10, 2026
CVE-2026-121908: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121352: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation10.0 CriticalN/AN/ANov 10, 2026
CVE-2026-121912: Adobe Adobe Connect: Adobe Connect is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-121887: Adobe Adobe Connect: Adobe Connect is affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability that could…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121350: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…7.7 HighN/AN/ANov 10, 2026
CVE-2026-121349: Adobe Adobe Connect: Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')…9.6 CriticalN/AN/ANov 10, 2026
1-25 of 557027
›