The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-16181: Improper Authorization7.4 HighN/A0%Oct 8, 2026
CVE-2026-16179: Buffer Underwrite7.5 HighN/A0%Oct 8, 2026
CVE-2026-16178: Out-of-bounds Write7.5 HighN/A0%Oct 8, 2026
CVE-2026-16177: Out-of-bounds Read5.3 MediumN/A0%Oct 8, 2026
CVE-2026-16176: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Oct 8, 2026
CVE-2026-16170: Out-of-bounds Write7.5 HighN/A0%Oct 8, 2026
CVE-2026-16169: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 8, 2026
CVE-2026-14521: Server-Side Request Forgery (SSRF)4.9 MediumN/A0%Oct 8, 2026
CVE-2026-97680: Improper Access Control8.3 HighN/A0%Oct 7, 2026
CVE-2026-97679: Improper Control of Generation of Code8.8 HighN/A0%Oct 7, 2026
CVE-2026-97678: Protection Mechanism Failure8.8 HighN/A0%Oct 7, 2026
CVE-2026-97676: Improper Control of Generation of Code8.8 HighN/A1%Oct 7, 2026
CVE-2026-97674: Improper Control of Generation of Code8.1 HighN/A0%Oct 7, 2026
CVE-2026-97673: Protection Mechanism Failure8.8 HighN/A0%Oct 7, 2026
CVE-2026-97671: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 7, 2026
CVE-2026-97655: Improper Control of Generation of Code8.8 HighN/A1%Oct 7, 2026
CVE-2026-93679: Uncontrolled Resource Consumption4.3 MediumN/A0%Oct 7, 2026
CVE-2026-93678: Authorization Bypass Through User-Controlled Key7.6 HighN/A0%Oct 7, 2026
CVE-2026-93677: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 7, 2026
CVE-2026-93675: Expected Behavior Violation9.8 CriticalN/A1%Oct 7, 2026
CVE-2026-93674: Improper Control of Generation of Code9.8 CriticalN/A1%Oct 7, 2026
CVE-2026-93449: Improper Control of Generation of Code8.8 HighN/A1%Oct 7, 2026
CVE-2026-93448: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Oct 7, 2026
CVE-2026-93447: Deserialization of Untrusted Data7.5 HighN/A0%Oct 7, 2026
CVE-2026-93445: Improper Control of Generation of Code8.8 HighN/A1%Oct 7, 2026
251-275 of 9776