The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-79980: Generation of Predictable Numbers or Identifiers5.6 MediumN/A0%Oct 23, 2026
CVE-2026-79979: Use After Free7.8 HighN/A0%Oct 23, 2026
CVE-2026-79978: Out-of-bounds Write3.6 LowN/A0%Oct 23, 2026
CVE-2026-79977: Missing Authentication for Critical Function8.2 HighN/A0%Oct 23, 2026
CVE-2026-19741: Use of Default Credentials7.5 HighN/A0%Oct 23, 2026
CVE-2026-115797: Cleartext Transmission of Sensitive Information3.7 Low2.9 Low0%Oct 23, 2026
CVE-2026-115796: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Oct 23, 2026
CVE-2026-115586: Improper Neutralization of Special Elements used in an OS CommandN/A7.1 High0%Oct 23, 2026
CVE-2026-115585: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 23, 2026
CVE-2026-115580: Excessive IterationN/A7.1 High0%Oct 23, 2026
CVE-2026-115572: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 23, 2026
CVE-2026-91093: Uncontrolled Search Path ElementN/A8.5 High0%Oct 23, 2026
CVE-2026-115845: Incomplete List of Disallowed Inputs6.4 Medium5.3 Medium0%Oct 23, 2026
CVE-2026-115570: Improper Check for Certificate Revocation7.4 HighN/A0%Oct 23, 2026
CVE-2026-115569: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Oct 23, 2026
CVE-2026-112342: Incorrect Authorization7.1 High7.1 High0%Oct 23, 2026
CVE-2026-115863: Stack-based Buffer Overflow7.6 HighN/A0%Oct 23, 2026
CVE-2026-115813: Server-Side Request Forgery (SSRF)5.8 Medium6.9 Medium0%Oct 23, 2026
CVE-2026-115812: Relative Path Traversal9.8 Critical9.3 Critical1%Oct 23, 2026
CVE-2026-115567: Concurrent Execution using Shared Resource with Improper SynchronizationN/A5.8 Medium0%Oct 23, 2026
CVE-2026-110975: Plaintext Storage of a Password7.4 HighN/A0%Oct 23, 2026
CVE-2026-87901: Improper Neutralization of Input During Web Page Generation8.3 HighN/A0%Oct 23, 2026
CVE-2026-115810: Server-Side Request Forgery (SSRF)7.7 High6.3 Medium0%Oct 23, 2026
CVE-2026-106074: Use of Insufficiently Random Values4.8 MediumN/A0%Oct 23, 2026
CVE-2026-106073: Improper Access Control3.3 LowN/A0%Oct 23, 2026
2526-2550 of 416436