The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115893: Insufficient Control Flow Management9.9 CriticalN/A0%Oct 23, 2026
CVE-2026-115892: Access of Resource Using Incompatible TypeN/A5.7 Medium0%Oct 23, 2026
CVE-2026-115889: Numeric Truncation Error9.9 CriticalN/A0%Oct 23, 2026
CVE-2026-115887: Inefficient Regular Expression Complexity7.5 HighN/A0%Oct 23, 2026
CVE-2026-115886: Use of Externally-Controlled Input to Select Classes or Code6.5 MediumN/A0%Oct 23, 2026
CVE-2026-115885: Insertion of Sensitive Information into Log FileN/A4.1 Medium0%Oct 23, 2026
CVE-2026-115883: Improper Input ValidationN/A6.0 Medium0%Oct 23, 2026
CVE-2026-115801: Out-of-bounds Read5.3 Medium1.9 Low0%Oct 23, 2026
CVE-2026-83813: Origin Validation Error3.1 LowN/A0%Oct 23, 2026
CVE-2026-75525: Incorrect Authorization5.3 MediumN/A0%Oct 23, 2026
CVE-2026-75524: Time-of-check Time-of-use (TOCTOU) Race Condition5.4 MediumN/A0%Oct 23, 2026
CVE-2026-65825: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Oct 23, 2026
CVE-2026-65824: Authentication Bypass by Capture-replay7.4 HighN/A0%Oct 23, 2026
CVE-2026-58202: Weak Password Recovery Mechanism for Forgotten Password8.3 HighN/A0%Oct 23, 2026
CVE-2026-57849: Undefined Security WeaknessN/AN/AN/AOct 23, 2026
CVE-2026-115877: Inconsistent Interpretation of HTTP Requests5.4 MediumN/A0%Oct 23, 2026
CVE-2026-115800: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium1.9 Low0%Oct 23, 2026
CVE-2026-115778: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 23, 2026
CVE-2026-115776: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 23, 2026
CVE-2026-115775: Uncontrolled Resource ConsumptionN/A8.7 High0%Oct 23, 2026
CVE-2026-115774: Uncontrolled Resource Consumption4.9 MediumN/A0%Oct 23, 2026
CVE-2026-113951: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-113877: Executable Regular Expression ErrorN/AN/A0%Oct 23, 2026
CVE-2026-79982: Out-of-bounds Write8.8 HighN/A0%Oct 23, 2026
CVE-2026-79981: Use of Insufficiently Random Values6.5 MediumN/A0%Oct 23, 2026
2501-2525 of 413502