The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-67177: Chargemap: Chargemap contains a stored cross site scripting vulnerability5.4 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-67176: Chargemap: Chargemap contains an open redirect vulnerability in the authentication login endpoint5.4 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-67175: Chargemap: Chargemap contains a stored cross-site scripting vulnerability that allows a remote, authenticated attacker to craft a…4.6 Medium5.1 MediumN/ANov 10, 2026
CVE-2026-123259: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-123258: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-119017: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-118482: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118481: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118480: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118479: Adobe Adobe Experience Manager 6.5: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118478: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-118197: Adobe: Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-114372: Adobe: Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a…5.4 MediumN/AN/ANov 10, 2026
CVE-2026-114371: Adobe: Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-113580: Adobe: Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-113579: Adobe: Adobe Experience Manager is affected by an Improper Control of Generation of Code ('Code Injection') vulnerability that…9.9 CriticalN/AN/ANov 10, 2026
CVE-2026-123341: Adobe Adobe Experience Manager as a Cloud Service: Adobe Experience Manager is affected by a reflected Cross-Site Scripting (XSS) vulnerability5.4 MediumN/AN/ANov 10, 2026
CVE-2026-125298: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-125297: AsiaInfo International: AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 accepts unauthenticated requests via the management API…9.8 Critical9.3 CriticalN/ANov 10, 2026
CVE-2026-107356: U.S. Geological Survey Area Species Management Research Program: U.S8.8 High8.7 HighN/ANov 10, 2026
CVE-2026-126123: BeeS Software Solutions ERP: BeeS Software Solutions ERP before 04 September 2026 allows any low-privileged user to navigate directly to the…6.5 Medium7.1 HighN/ANov 10, 2026
CVE-2026-92558: Kong Inc.: The proxy-cache and proxy-cache-advanced plugins in Kong Gateway Enterprise and Kong AI Gateway do not escape separator…N/A6.3 MediumN/ANov 10, 2026
CVE-2025-0027: AMD: Improper access control in AMD Secure Encrypted Virtualization (SEV) firmware could allow a malicious hypervisor to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-29940: AMD: Unverified ownership in Secure Encrypted Virtualization (SEV) firmware could allow a privileged attacker with access to…N/A5.9 MediumN/ANov 10, 2026
CVE-2025-52537: AMD: Improper access control within the AMD Secure Encrypted Virtualization (SEV) firmware could allow an attacker with…N/A4.0 MediumN/ANov 10, 2026
1-25 of 557027
›