The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-93294: Grafana: A user with query access to an Azure Monitor data source can use its resource proxy to call Azure Resource Manager APIs…6.3 MediumN/A0%Oct 13, 2026
CVE-2026-92892: jfrog jfrog-cli: Potential arbitrary code execution, under specific configurations.9.0 CriticalN/A0%Oct 13, 2026
CVE-2026-52394: n/a: DeepSeek V4 is vulnerable to Incorrect Access Control via a crafted input.9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-33374: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 13, 2026
CVE-2026-23707: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Oct 13, 2026
CVE-2026-23706: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 13, 2026
CVE-2026-23705: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Oct 13, 2026
CVE-2026-15577: Incorrect Authorization6.5 MediumN/A0%Oct 13, 2026
CVE-2026-108385: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108384: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108383: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108382: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108381: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108380: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108379: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108378: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108377: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108376: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-108375: Improper Control of Generation of Code8.8 HighN/A0%Oct 13, 2026
CVE-2026-106176: Missing Authorization3.8 LowN/A0%Oct 13, 2026
CVE-2026-106175: Double Free2.3 LowN/A0%Oct 13, 2026
CVE-2026-106173: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-106172: Use of Hard-coded Cryptographic Key5.3 MediumN/A0%Oct 13, 2026
CVE-2026-106171: Improper Neutralization of Special Elements used in an OS Command6.1 MediumN/A1%Oct 13, 2026
CVE-2026-106170: Uncaught Exception4.9 MediumN/A0%Oct 13, 2026
2676-2700 of 444579
‹›