The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112091: Exposure of Sensitive Information to an Unauthorized Actor5.3 Medium5.5 Medium0%Oct 19, 2026
CVE-2026-112090: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-111439: Missing Authorization4.3 MediumN/A0%Oct 19, 2026
CVE-2026-94294: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-94272: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-94231: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-94230: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-94229: Authorization Bypass Through User-Controlled Key5.3 MediumN/A0%Oct 19, 2026
CVE-2026-94228: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-91831: Improper Neutralization of CRLF Sequences3.8 LowN/A0%Oct 19, 2026
CVE-2026-86791: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 19, 2026
CVE-2026-76740: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A0%Oct 19, 2026
CVE-2026-74922: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 19, 2026
CVE-2026-74921: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 19, 2026
CVE-2026-112089: Improper Neutralization of Special Elements used in an SQL Command4.7 Medium2.0 Low0%Oct 19, 2026
CVE-2026-112088: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112087: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-110034: Improper Input Validation3.7 LowN/A0%Oct 19, 2026
CVE-2026-106010: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-103311: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 19, 2026
CVE-2026-16460: Insufficient Verification of Data Authenticity7.4 HighN/A0%Oct 19, 2026
CVE-2026-94273: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-91047: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-91046: Improper Access Control4.3 MediumN/A0%Oct 19, 2026
CVE-2026-89286: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 19, 2026
2676-2700 of 417319
‹›