The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109828: Use of Uninitialized Variable4.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109827: Out-of-bounds Write6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109412: Exposed Dangerous Method or Function9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A1%Oct 13, 2026
CVE-2026-106043: Missing Authentication for Critical Function7.5 HighN/A1%Oct 13, 2026
CVE-2026-106042: External Control of File Name or Path9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-106035: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Oct 13, 2026
CVE-2026-106034: Improper Limitation of a Pathname to a Restricted Directory5.0 MediumN/A0%Oct 13, 2026
CVE-2026-104250: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-104126: Improper Control of Generation of Code6.0 MediumN/A0%Oct 13, 2026
CVE-2026-103030: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 13, 2026
CVE-2026-102989: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-88833: Red Hat Red Hat Hardened Images: A flaw was found in BusyBox's udhcpc DHCP client6.5 MediumN/A0%Oct 13, 2026
CVE-2026-110128: Missing Authentication for Critical Function7.5 High8.7 High0%Oct 13, 2026
CVE-2026-110127: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110123: Missing Authorization7.1 High7.1 High0%Oct 13, 2026
CVE-2026-110122: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110118: Authorization Bypass Through User-Controlled Key6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110117: Missing Authorization6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-110113: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110110: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-110106: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 13, 2026
2751-2775 of 444673
‹›