The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115481: Unrestricted Upload of File with Dangerous TypeN/A8.5 High0%Oct 23, 2026
CVE-2026-115480: Improper Control of Interaction Frequency5.3 MediumN/A0%Oct 23, 2026
CVE-2026-115479: Improper Input Validation5.3 MediumN/A0%Oct 23, 2026
CVE-2026-115457: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-114624: Deserialization of Untrusted Data7.2 HighN/A1%Oct 23, 2026
CVE-2026-114623: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Oct 23, 2026
CVE-2026-114622: Improper Limitation of a Pathname to a Restricted Directory7.2 HighN/A0%Oct 23, 2026
CVE-2026-114621: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 23, 2026
CVE-2026-114357: Missing Authentication for Critical FunctionN/A9.3 Critical0%Oct 23, 2026
CVE-2026-114356: Missing AuthorizationN/A7.0 High0%Oct 23, 2026
CVE-2026-114355: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High1%Oct 23, 2026
CVE-2026-114354: Missing AuthorizationN/A8.6 High0%Oct 23, 2026
CVE-2026-114353: Hidden FunctionalityN/A7.0 High0%Oct 23, 2026
CVE-2026-10632: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 23, 2026
CVE-2026-99087: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-99086: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-99085: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-99084: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-99083: Undefined Security Weakness8.8 HighN/A0%Oct 23, 2026
CVE-2026-99082: Undefined Security Weakness8.8 HighN/A0%Oct 23, 2026
CVE-2026-99081: Undefined Security Weakness7.5 HighN/A0%Oct 23, 2026
CVE-2026-99080: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-99079: Undefined Security Weakness9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-99078: Undefined Security Weakness9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-99077: Undefined Security Weakness7.4 HighN/A0%Oct 23, 2026
2626-2650 of 416436