The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-98926: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98925: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98924: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98923: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98922: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98921: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98920: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98919: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98918: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98917: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-63120: Improper Limitation of a Pathname to a Restricted Directory8.4 HighN/A0%Oct 23, 2026
CVE-2026-57210: Improper Input ValidationN/A7.0 High0%Oct 23, 2026
CVE-2026-57209: Improper Input ValidationN/A7.0 High0%Oct 23, 2026
CVE-2026-57146: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 23, 2026
CVE-2026-57144: Incorrect Privilege Assignment8.8 HighN/A0%Oct 23, 2026
CVE-2026-57142: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 23, 2026
CVE-2026-57121: Improper Authorization8.1 HighN/A0%Oct 23, 2026
CVE-2026-57117: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Oct 23, 2026
CVE-2026-57116: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-57114: Time-of-check Time-of-use (TOCTOU) Race Condition7.2 HighN/A0%Oct 23, 2026
CVE-2026-57113: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Oct 23, 2026
CVE-2026-55889: Use of Insufficiently Random ValuesN/A8.3 High0%Oct 23, 2026
CVE-2026-55888: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.8 High0%Oct 23, 2026
CVE-2026-55422: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 23, 2026
CVE-2026-55190: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Oct 23, 2026
2801-2825 of 416436