The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-83559: Apache Software Foundation Apache Wicket: Improper encoding or escaping of output in Apache WicketN/A7.4 HighN/ANov 1, 2026
CVE-2026-83539: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.4 HighN/ANov 1, 2026
CVE-2026-82956: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.6 HighN/ANov 1, 2026
CVE-2026-120276: WAVLINK WN536AX6-A: A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.010.0 Critical10.0 CriticalN/ANov 1, 2026
CVE-2026-120275: Shanghai Xi Yu Ji Zhi Technology Minimax Code: A security flaw has been discovered in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.85.5 Medium5.1 MediumN/ANov 1, 2026
CVE-2026-111089: Apache Software Foundation Apache Wicket: Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes…N/A7.6 HighN/ANov 1, 2026
CVE-2026-95863: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.6 HighN/ANov 1, 2026
CVE-2026-87718: Apache Software Foundation Apache Wicket: Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render request…N/A2.3 LowN/ANov 1, 2026
CVE-2026-84231: Apache Software Foundation Apache Wicket: Improper neutralization of input during web page generation in Apache WicketN/A7.4 HighN/ANov 1, 2026
CVE-2026-84177: Apache Software Foundation Apache Wicket: Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that…N/A6.3 MediumN/ANov 1, 2026
CVE-2026-84172: Apache Software Foundation Apache Wicket: Files accessible to external parties in Apache WicketN/A6.3 MediumN/ANov 1, 2026
CVE-2026-84170: Apache Software Foundation Apache Wicket: Allocation of resources without limits or throttling in Apache WicketN/A8.3 HighN/ANov 1, 2026
CVE-2026-83594: Apache Software Foundation Apache Wicket: Memory allocation with an excessive size value in Apache WicketN/A8.3 HighN/ANov 1, 2026
CVE-2026-82898: Apache Software Foundation Apache Wicket: Incorrect order of security checks in Apache WicketN/A2.1 LowN/ANov 1, 2026
CVE-2026-82840: Apache Software Foundation Apache Wicket: Session fixation in Apache WicketN/A7.2 HighN/ANov 1, 2026
CVE-2026-82705: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.3 MediumN/ANov 1, 2026
CVE-2026-82704: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.9 MediumN/ANov 1, 2026
CVE-2026-82559: Apache Software Foundation Apache Wicket: Insufficient session expiration in Apache WicketN/A2.3 LowN/ANov 1, 2026
CVE-2026-82558: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A2.3 LowN/ANov 1, 2026
CVE-2026-82557: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.9 MediumN/ANov 1, 2026
CVE-2026-82115: Apache Software Foundation Apache Wicket: Missing authorization in Apache WicketN/A6.3 MediumN/ANov 1, 2026
CVE-2026-120274: beecue FastBee: A vulnerability was identified in beecue FastBee up to 2.1.04.7 Medium5.1 MediumN/ANov 1, 2026
CVE-2026-120242: Ruijie: A security flaw has been discovered in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P…2.4 Low1.9 LowN/ANov 1, 2026
CVE-2026-120241: Ruijie: A vulnerability was identified in Ruijie RG-ES205GC, RG-ES206GC-P, RG-ES208GC, RG-ES210GC-LP and RG-ES210GS-P…7.5 High7.7 HighN/ANov 1, 2026
CVE-2026-120240: WAVLINK WN553X1-B: A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.09.9 Critical8.6 HighN/ANov 1, 2026
1-25 of 420636
›