The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57142: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 23, 2026
CVE-2026-57121: Improper Authorization8.1 HighN/A0%Oct 23, 2026
CVE-2026-57117: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Oct 23, 2026
CVE-2026-57116: Exposure of Sensitive Information to an Unauthorized Actor9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-57114: Time-of-check Time-of-use (TOCTOU) Race Condition7.2 HighN/A0%Oct 23, 2026
CVE-2026-57113: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Oct 23, 2026
CVE-2026-55889: Use of Insufficiently Random ValuesN/A8.3 High0%Oct 23, 2026
CVE-2026-55888: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.8 High0%Oct 23, 2026
CVE-2026-55422: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 23, 2026
CVE-2026-55190: Server-Side Request Forgery (SSRF)6.5 MediumN/A0%Oct 23, 2026
CVE-2026-54711: Insertion of Sensitive Information into Log FileN/A2.4 Low0%Oct 23, 2026
CVE-2026-115752: Server-Side Request Forgery (SSRF)4.2 Medium2.3 Low0%Oct 23, 2026
CVE-2026-115751: Incomplete List of Disallowed Inputs3.7 Low6.3 Medium0%Oct 23, 2026
CVE-2026-115750: Insufficiently Protected Credentials3.7 Low6.3 Medium0%Oct 23, 2026
CVE-2026-115749: Use of Externally-Controlled Input to Select Classes or Code3.3 Low4.8 Medium0%Oct 23, 2026
CVE-2026-115730: Improper Neutralization of Special Elements in Output Used by a Downstream Component3.1 Low2.3 Low0%Oct 23, 2026
CVE-2026-115729: Server-Side Request Forgery (SSRF)6.8 Medium8.9 High0%Oct 23, 2026
CVE-2026-115728: Inefficient Regular Expression Complexity7.5 High8.7 High0%Oct 23, 2026
CVE-2026-112863: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-112859: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112858: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112857: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112856: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112855: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112854: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
2801-2825 of 416436