The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-125298: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-125297: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-107356: U.S. Geological Survey Area Species Management Research Program: U.S8.8 High8.7 HighN/ANov 10, 2026
CVE-2026-126123: BeeS Software Solutions ERP: BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-92558: Kong Inc.: The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator…N/A6.3 MediumN/ANov 10, 2026
CVE-2025-0027: AMD: Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-29940: AMD: Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-52537: AMD: Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-52535: AMD: Improper resource reuse in the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54506: AMD: A time-of-check to time-of-use (TOCTOU) race condition in the AMD SEV Secure Encrypted Virtualization (SEV) firmware…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54503: AMD: Improper handling of overlap between protected memory ranges in the Secure Encrypted Virtualization (SEV) firmware…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-54508: AMD: Improper validation of Reverse Map Table (RMP) entries in the Secure Encrypted Virtualization (SEV) firmware could…N/A4.0 MediumN/ANov 10, 2026
CVE-2025-54504: AMD: Insufficient Granularity of Access Control in AMD Secure Encrypted Virtualization (SEV) firmware could allow an…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-62620: AMD: Improper validation of unsafe equivalence in input could allow an attacker with high privileges to reclaim the ring…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-123041: Kong Inc.: The request-callout plugin in Kong Gateway Enterprise and Kong AI Gateway omits callout headers not sent by the client…N/A8.2 HighN/ANov 10, 2026
CVE-2025-62621: AMD: Expected behavior violation in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2026-92441: Kong Inc.: Kong Gateway Enterprise and Kong AI Gateway include decoded CR/LF characters from the request path in the…N/A7.8 HighN/ANov 10, 2026
CVE-2026-92439: Kong Inc.: The SAML plugin in Kong Gateway Enterprise does not enforce AudienceRestriction, allowing a valid assertion issued for…N/A7.8 HighN/ANov 10, 2026
CVE-2026-96437: Kong Inc. Kong Gateway Enterprise: The ai-azure-content-safety plugin in Kong Gateway Enterprise skips inspection of request bodies larger than the…N/A8.2 HighN/ANov 10, 2026
CVE-2026-92443: Kong Inc.: The caching plugins in Kong Gateway Enterprise and Kong AI Gateway may serve a response cached for a request carrying…N/A8.2 HighN/ANov 10, 2026
CVE-2026-121898: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121896: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121913: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation8.8 HighN/AN/ANov 10, 2026
CVE-2026-121908: Adobe Adobe Connect: Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-121352: Adobe Adobe Connect: Adobe Connect is affected by an Incorrect Authorization vulnerability that could result in privilege escalation10.0 CriticalN/AN/ANov 10, 2026
1-25 of 557027
›