The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-75524: Time-of-check Time-of-use (TOCTOU) Race Condition5.4 MediumN/A0%Oct 23, 2026
CVE-2026-65825: Improper Restriction of Excessive Authentication Attempts7.5 HighN/A0%Oct 23, 2026
CVE-2026-65824: Authentication Bypass by Capture-replay7.4 HighN/A0%Oct 23, 2026
CVE-2026-58202: Weak Password Recovery Mechanism for Forgotten Password8.3 HighN/A0%Oct 23, 2026
CVE-2026-57849: Undefined Security WeaknessN/AN/AN/AOct 23, 2026
CVE-2026-115877: Inconsistent Interpretation of HTTP Requests5.4 MediumN/A0%Oct 23, 2026
CVE-2026-115800: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium1.9 Low0%Oct 23, 2026
CVE-2026-115778: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 23, 2026
CVE-2026-115776: Uncontrolled Resource Consumption7.5 HighN/A1%Oct 23, 2026
CVE-2026-115775: Uncontrolled Resource ConsumptionN/A8.7 High0%Oct 23, 2026
CVE-2026-115774: Uncontrolled Resource Consumption4.9 MediumN/A0%Oct 23, 2026
CVE-2026-113951: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-113877: Executable Regular Expression ErrorN/AN/A0%Oct 23, 2026
CVE-2026-79982: Out-of-bounds Write8.8 HighN/A0%Oct 23, 2026
CVE-2026-79981: Use of Insufficiently Random Values6.5 MediumN/A0%Oct 23, 2026
CVE-2026-79980: Generation of Predictable Numbers or Identifiers5.6 MediumN/A0%Oct 23, 2026
CVE-2026-79979: Use After Free7.8 HighN/A0%Oct 23, 2026
CVE-2026-79978: Out-of-bounds Write3.6 LowN/A0%Oct 23, 2026
CVE-2026-79977: Missing Authentication for Critical Function8.2 HighN/A0%Oct 23, 2026
CVE-2026-19741: Use of Default Credentials7.5 HighN/A0%Oct 23, 2026
CVE-2026-115797: Cleartext Transmission of Sensitive Information3.7 Low2.9 Low0%Oct 23, 2026
CVE-2026-115796: Cross-Site Request Forgery (CSRF)4.3 Medium2.1 Low0%Oct 23, 2026
CVE-2026-115586: Improper Neutralization of Special Elements used in an OS CommandN/A7.1 High0%Oct 23, 2026
CVE-2026-115585: Uncontrolled Resource ConsumptionN/A7.1 High0%Oct 23, 2026
CVE-2026-115580: Excessive IterationN/A7.1 High0%Oct 23, 2026
2526-2550 of 416436