The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-74921: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 19, 2026
CVE-2026-112089: Improper Neutralization of Special Elements used in an SQL Command4.7 Medium2.0 Low0%Oct 19, 2026
CVE-2026-112088: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112087: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-110034: Improper Input Validation3.7 LowN/A0%Oct 19, 2026
CVE-2026-106010: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-103311: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 19, 2026
CVE-2026-16460: Insufficient Verification of Data Authenticity7.4 HighN/A0%Oct 19, 2026
CVE-2026-94273: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-91047: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-91046: Improper Access Control4.3 MediumN/A0%Oct 19, 2026
CVE-2026-89286: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 19, 2026
CVE-2026-76739: Improper Input Validation4.3 MediumN/A0%Oct 19, 2026
CVE-2026-16487: Insufficient Verification of Data AuthenticityN/AN/A0%Oct 19, 2026
CVE-2026-112086: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112083: Improper Resource Shutdown or Release5.3 Medium5.5 Medium0%Oct 19, 2026
CVE-2026-112082: Improper Resource Shutdown or Release7.5 High7.7 High1%Oct 19, 2026
CVE-2026-112081: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-108121: Improper Input ValidationN/A6.9 Medium0%Oct 19, 2026
CVE-2026-108120: Path Traversal: 'dir\..\..\filename'N/A7.7 High0%Oct 19, 2026
CVE-2026-106933: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 19, 2026
CVE-2026-106028: Missing Authorization5.3 MediumN/A0%Oct 19, 2026
CVE-2026-106014: Improper Access Control5.3 MediumN/A0%Oct 19, 2026
CVE-2026-112080: Improper Control of Generation of Code6.3 Medium2.1 Low0%Oct 19, 2026
CVE-2026-112079: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Oct 19, 2026
2826-2850 of 417319
‹›