The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-54711: Insertion of Sensitive Information into Log FileN/A2.4 Low0%Oct 23, 2026
CVE-2026-115752: Server-Side Request Forgery (SSRF)4.2 Medium2.3 Low0%Oct 23, 2026
CVE-2026-115751: Incomplete List of Disallowed Inputs3.7 Low6.3 Medium0%Oct 23, 2026
CVE-2026-115750: Insufficiently Protected Credentials3.7 Low6.3 Medium0%Oct 23, 2026
CVE-2026-115749: Use of Externally-Controlled Input to Select Classes or Code3.3 Low4.8 Medium0%Oct 23, 2026
CVE-2026-115730: Improper Neutralization of Special Elements in Output Used by a Downstream Component3.1 Low2.3 Low0%Oct 23, 2026
CVE-2026-115729: Server-Side Request Forgery (SSRF)6.8 Medium8.9 High0%Oct 23, 2026
CVE-2026-115728: Inefficient Regular Expression Complexity7.5 High8.7 High0%Oct 23, 2026
CVE-2026-112863: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-112859: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112858: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112857: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112856: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112855: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112854: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112853: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112852: Deserialization of Untrusted Data8.1 HighN/A0%Oct 23, 2026
CVE-2026-112851: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112850: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 23, 2026
CVE-2026-112849: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-112848: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112847: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112846: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-98916: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98915: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
2826-2850 of 416436