The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-85247: Improper Certificate Validation5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85246: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85245: Exposure of Data Element to Wrong Session5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85243: Improper Validation of Integrity Check Value5.9 MediumN/A0%Oct 19, 2026
CVE-2026-84181: Improper Authentication5.9 MediumN/A0%Oct 19, 2026
CVE-2026-84180: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-84178: Cross-Site Request Forgery (CSRF)6.1 MediumN/A0%Oct 19, 2026
CVE-2026-84176: Permissive Cross-domain Policy with Untrusted Domains6.5 MediumN/A0%Oct 19, 2026
CVE-2026-83531: Improper Control of Generation of Code8.8 HighN/A1%Oct 19, 2026
CVE-2026-80344: Server-Side Request Forgery (SSRF)8.2 HighN/A0%Oct 19, 2026
CVE-2026-80343: Improper Handling of Case Sensitivity8.2 HighN/A0%Oct 19, 2026
CVE-2026-80312: Improper Authentication8.2 HighN/A1%Oct 19, 2026
CVE-2026-79986: Improper Limitation of a Pathname to a Restricted Directory7.4 HighN/A1%Oct 19, 2026
CVE-2026-78164: Improper Neutralization of Special Elements Used in a Template Engine8.2 HighN/A0%Oct 19, 2026
CVE-2026-78163: Server-Side Request Forgery (SSRF)5.9 MediumN/A0%Oct 19, 2026
CVE-2026-78162: Deserialization of Untrusted DataN/A10.0 Critical1%Oct 19, 2026
CVE-2026-71253: Use of Externally-Controlled Input to Select Classes or Code9.8 CriticalN/A0%Oct 19, 2026
CVE-2026-112106: Improper Certificate Validation3.7 Low6.3 Medium0%Oct 19, 2026
CVE-2026-112105: Improper Certificate Validation3.7 Low6.3 Medium0%Oct 19, 2026
CVE-2026-112104: Missing Authentication for Critical Function7.3 High6.9 Medium1%Oct 19, 2026
CVE-2026-112103: Improper Certificate Validation3.7 Low6.3 Medium0%Oct 19, 2026
CVE-2026-90910: Missing Authentication for Critical Function9.8 CriticalN/A1%Oct 19, 2026
CVE-2026-86589: Incorrect Implementation of Authentication AlgorithmN/AN/A0%Oct 19, 2026
CVE-2026-79633: Exposure of Sensitive Information Through Data QueriesN/AN/A0%Oct 19, 2026
CVE-2026-79624: Insufficient Session ExpirationN/AN/A0%Oct 19, 2026
2601-2625 of 417319
‹›