The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-112139: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 19, 2026
CVE-2026-112138: Improper Limitation of a Pathname to a Restricted Directory4.7 Medium2.0 Low0%Oct 19, 2026
CVE-2026-112108: Buffer Copy without Checking Size of Input6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112107: Buffer Copy without Checking Size of Input6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-103314: Authentication Bypass by Capture-replay7.4 HighN/A0%Oct 19, 2026
CVE-2026-91858: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Oct 19, 2026
CVE-2026-88901: Improper Restriction of XML External Entity Reference8.2 HighN/A1%Oct 19, 2026
CVE-2026-85317: Use of Cache Containing Sensitive Information4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85316: Insufficient Granularity of Access Control4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85315: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85314: Improper Input Validation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85313: Permissive Cross-domain Policy with Untrusted Domains4.3 MediumN/A0%Oct 19, 2026
CVE-2026-85312: Improper Input Validation4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85301: Improper Authentication4.8 MediumN/A0%Oct 19, 2026
CVE-2026-85300: Incorrect Default Permissions5.5 MediumN/A0%Oct 19, 2026
CVE-2026-85296: Exposure of Data Element to Wrong Session6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85260: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Oct 19, 2026
CVE-2026-85257: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
CVE-2026-85254: Improper Handling of Case Sensitivity6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85251: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 19, 2026
CVE-2026-85250: Improper Restriction of XML External Entity Reference7.5 HighN/A1%Oct 19, 2026
CVE-2026-85249: Improper Input Validation6.5 MediumN/A0%Oct 19, 2026
CVE-2026-85248: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85247: Improper Certificate Validation5.9 MediumN/A0%Oct 19, 2026
CVE-2026-85246: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 19, 2026
2701-2725 of 417319
‹›