The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2025-45528: Undefined Security Weakness7.3 HighN/A0%Oct 23, 2026
CVE-2026-58497: Origin Validation ErrorN/A8.6 High0%Oct 23, 2026
CVE-2026-55486: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Oct 23, 2026
CVE-2026-55465: Improper Neutralization of Special Elements used in an SQL Command5.3 MediumN/A0%Oct 23, 2026
CVE-2026-55463: Missing Authentication for Critical Function6.5 MediumN/A0%Oct 23, 2026
CVE-2026-55459: Improper Authentication7.4 HighN/A0%Oct 23, 2026
CVE-2026-55457: Improper Authentication7.4 HighN/A0%Oct 23, 2026
CVE-2026-55444: Improper Input Validation5.3 MediumN/A0%Oct 23, 2026
CVE-2026-55442: Improper Input Validation5.3 MediumN/A0%Oct 23, 2026
CVE-2026-55222: Incorrect Decoding of Security Identifiers5.1 MediumN/A0%Oct 23, 2026
CVE-2026-54668: Improper Restriction of XML External Entity ReferenceN/A8.7 High0%Oct 23, 2026
CVE-2026-53942: Improper Control of Generation of Code9.9 CriticalN/A0%Oct 23, 2026
CVE-2026-49442: Observable Response Discrepancy5.3 MediumN/A0%Oct 23, 2026
CVE-2026-46652: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-46651: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-46531: Improper Neutralization of Special Elements used in an SQL Command5.5 MediumN/A0%Oct 23, 2026
CVE-2026-46347: Use of Insufficiently Random Values6.8 MediumN/A0%Oct 23, 2026
CVE-2026-46346: Use of Insufficiently Random Values6.5 MediumN/A0%Oct 23, 2026
CVE-2026-39902: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A0%Oct 23, 2026
CVE-2026-115478: Incomplete CleanupN/A7.1 High0%Oct 23, 2026
CVE-2026-115477: Improper AuthorizationN/A7.1 High0%Oct 23, 2026
CVE-2026-112333: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 23, 2026
CVE-2026-106765: Undefined Security Weakness7.5 HighN/A1%Oct 23, 2026
CVE-2026-106764: Undefined Security Weakness7.5 HighN/A1%Oct 23, 2026
CVE-2026-106763: Undefined Security Weakness7.5 HighN/A1%Oct 23, 2026
2576-2600 of 416436