The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-82898: Apache Software Foundation Apache Wicket: Incorrect order of security checks in Apache WicketN/A2.1 LowN/ANov 1, 2026
CVE-2026-82840: Apache Software Foundation Apache Wicket: Session fixation in Apache WicketN/A7.2 HighN/ANov 1, 2026
CVE-2026-82705: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.3 MediumN/ANov 1, 2026
CVE-2026-82704: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.9 MediumN/ANov 1, 2026
CVE-2026-82559: Apache Software Foundation Apache Wicket: Insufficient session expiration in Apache WicketN/A2.3 LowN/ANov 1, 2026
CVE-2026-82558: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A2.3 LowN/ANov 1, 2026
CVE-2026-82557: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.9 MediumN/ANov 1, 2026
CVE-2026-82115: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.3 MediumN/ANov 1, 2026
CVE-2026-120274: beecue FastBee: A vulnerability was identified in beecue FastBee up to 2.1.04.7 Medium5.1 MediumN/ANov 1, 2026
CVE-2026-120242: Ruijie: A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P…2.4 Low1.9 LowN/ANov 1, 2026
CVE-2026-120241: Ruijie: A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P…7.5 High7.7 HighN/ANov 1, 2026
CVE-2026-120240: WAVLINK WN553X1-B: A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.09.9 Critical8.6 HighN/ANov 1, 2026
CVE-2026-120239: WAVLINK WN553X1-B: A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.09.9 Critical8.6 HighN/ANov 1, 2026
CVE-2026-120238: WAVLINK WN553X1-B: A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.09.9 Critical8.6 HighN/ANov 1, 2026
CVE-2026-120237: ag-ui-protocol ag-ui: A flaw has been found in ag-ui-protocol ag-ui up to 0.0.584.3 Medium2.1 LowN/ANov 1, 2026
CVE-2026-74760: Origin Validation ErrorN/AN/AN/ANov 1, 2026
CVE-2026-74759: Server-Side Request Forgery (SSRF)N/AN/AN/ANov 1, 2026
CVE-2026-120236: ag-ui-protocol ag-ui: A vulnerability was detected in ag-ui-protocol ag-ui up to 0.0.586.3 Medium2.1 LowN/ANov 1, 2026
CVE-2026-66570: Nickboss WordPress File Upload: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nickboss…7.1 HighN/AN/ANov 1, 2026
CVE-2026-62048: Liquid Web / StellarWP BookIt: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…9.3 CriticalN/AN/ANov 1, 2026
CVE-2026-120338: PrefectHQ prefab-ui: Prefab UI's Generative UI sandbox runs caller-supplied Python inside Pyodide, Python compiled to WebAssembly, in a Deno…10.0 CriticalN/AN/ANov 1, 2026
CVE-2026-120235: ag-ui-protocol ag-ui: A security vulnerability has been detected in ag-ui-protocol ag-ui up to 0.0.584.3 Medium2.1 LowN/ANov 1, 2026
CVE-2026-120234: ag-ui-protocol ag-ui: A weakness has been identified in ag-ui-protocol ag-ui up to 0.0.584.3 Medium2.1 LowN/ANov 1, 2026
CVE-2026-120233: ag-ui-protocol ag-ui: A security flaw has been discovered in ag-ui-protocol ag-ui up to 0.0.585.3 Medium5.5 MediumN/ANov 1, 2026
CVE-2026-119480: Crocoblock JetFormBuilder: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock…6.5 MediumN/AN/ANov 1, 2026
1-25 of 420636
›