The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-102786: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Oct 23, 2026
CVE-2026-93640: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Oct 23, 2026
CVE-2026-93639: Missing Authorization8.7 HighN/A0%Oct 23, 2026
CVE-2026-93638: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 23, 2026
CVE-2026-93636: Improper Neutralization of Special Elements used in an LDAP Query4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93634: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93633: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 23, 2026
CVE-2026-93631: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Oct 23, 2026
CVE-2026-93630: Incorrect Behavior Order: Validate Before Canonicalize4.3 MediumN/A0%Oct 23, 2026
CVE-2026-93629: Authentication Bypass by Spoofing5.3 MediumN/A0%Oct 23, 2026
CVE-2026-93628: Authentication Bypass by Spoofing5.3 MediumN/A0%Oct 23, 2026
CVE-2026-93627: Authentication Bypass by Spoofing5.3 MediumN/A0%Oct 23, 2026
CVE-2026-57208: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.2 Medium0%Oct 23, 2026
CVE-2026-57207: Missing Authentication for Critical Function5.9 MediumN/A0%Oct 23, 2026
CVE-2026-55826: Exposure of Sensitive Information to an Unauthorized ActorN/A8.7 High0%Oct 23, 2026
CVE-2026-55606: Buffer Over-read6.5 MediumN/A0%Oct 23, 2026
CVE-2026-53921: Stack-based Buffer Overflow9.8 CriticalN/A1%Oct 23, 2026
CVE-2026-53920: Out-of-bounds ReadN/A8.7 High0%Oct 23, 2026
CVE-2026-53918: Use After FreeN/A8.8 High1%Oct 23, 2026
CVE-2026-50057: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Oct 23, 2026
CVE-2026-50056: Improper Neutralization of Argument Delimiters in a Command7.8 HighN/A0%Oct 23, 2026
CVE-2026-50053: External Control of Critical State Data8.7 HighN/A0%Oct 23, 2026
CVE-2026-115786: Incorrect Calculation6.5 MediumN/A0%Oct 23, 2026
CVE-2026-115785: Improper Neutralization of CRLF Sequences4.3 MediumN/A1%Oct 23, 2026
CVE-2026-115754: Improper Neutralization of Input During Web Page Generation4.7 Medium2.3 Low0%Oct 23, 2026
2601-2625 of 416436