The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109827: Out-of-bounds Write6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109620: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109607: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109606: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109412: Exposed Dangerous Method or Function9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-106047: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A1%Oct 13, 2026
CVE-2026-106043: Missing Authentication for Critical Function7.5 HighN/A1%Oct 13, 2026
CVE-2026-106042: External Control of File Name or Path9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-106035: Insertion of Sensitive Information into Log File5.5 MediumN/A0%Oct 13, 2026
CVE-2026-106034: Improper Limitation of a Pathname to a Restricted Directory5.0 MediumN/A0%Oct 13, 2026
CVE-2026-104250: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-104126: Improper Control of Generation of Code6.0 MediumN/A0%Oct 13, 2026
CVE-2026-103030: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 13, 2026
CVE-2026-102989: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-96299: MongoDB MongoDB Server: A security issue was discovered in MongoDB mongos (the sharded cluster router) where an authenticated user with…6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-96297: MongoDB MongoDB Server: Use of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area…6.5 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-88836: Rejected reason: Red Hat Product Security determined this is not a security vulnerabilityN/AN/AN/AOct 13, 2026
CVE-2026-81507: espressif esp-idf: ESF-IDF is the Espressif Internet of Things (IOT) Development Framework6.5 MediumN/A0%Oct 13, 2026
Alpine Linux: CVE-2026-79611: Vulnerability in Multiple ComponentsN/AN/A0%Oct 13, 2026
Alpine Linux: CVE-2026-79610: Vulnerability in Multiple ComponentsN/AN/A0%Oct 13, 2026
Alpine Linux: CVE-2026-79609: Vulnerability in Multiple ComponentsN/AN/A0%Oct 13, 2026
Alpine Linux: CVE-2026-79608: Vulnerability in Multiple ComponentsN/AN/A0%Oct 13, 2026
CVE-2026-79607: Xen: During Xenstore live update the state record for a Xenstore watch with specified watch depth is written with two bytes…N/AN/A0%Oct 13, 2026
CVE-2026-78802: n/a: An issue in SKYWORTH DIGITAL CO.,LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remote…9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-69150: keepassxreboot keepassxc: KeePassXC is a cross-platform community-driven port of the Windows application KeePass Password SafeN/A4.3 Medium0%Oct 13, 2026
2826-2850 of 443723
‹›