The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-98874: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98873: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98872: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98871: Undefined Security WeaknessN/AN/A0%Oct 23, 2026
CVE-2026-98870: Undefined Security Weakness8.8 HighN/A1%Oct 23, 2026
CVE-2026-95620: Use After FreeN/A2.1 Low0%Oct 23, 2026
CVE-2026-94263: Improper Neutralization of Special Elements in Output Used by a Downstream Component4.8 MediumN/A0%Oct 23, 2026
CVE-2026-56840: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 23, 2026
CVE-2026-56838: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 23, 2026
CVE-2026-56837: Improper Authentication8.6 HighN/A0%Oct 23, 2026
CVE-2026-56836: Improper Authentication8.2 HighN/A0%Oct 23, 2026
CVE-2026-56835: Missing Authorization8.3 HighN/A0%Oct 23, 2026
CVE-2026-56834: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Oct 23, 2026
CVE-2026-56833: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Oct 23, 2026
CVE-2026-56832: Insufficient Verification of Data Authenticity8.8 HighN/A0%Oct 23, 2026
CVE-2026-115727: Active Debug Code8.1 High9.2 Critical1%Oct 23, 2026
CVE-2026-115726: Improper Neutralization of Special Elements used in an OS Command7.8 High8.5 High0%Oct 23, 2026
CVE-2026-115725: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 23, 2026
CVE-2026-115724: Origin Validation Error2.9 Low2.1 Low0%Oct 23, 2026
CVE-2026-115723: Out-of-bounds Write7.4 High8.3 High0%Oct 23, 2026
CVE-2026-115722: Improper Validation of Array Index6.1 Medium6.9 Medium0%Oct 23, 2026
CVE-2026-112904: Path Traversal: '/dir/../filename'8.7 HighN/A0%Oct 23, 2026
CVE-2026-111965: Protection Mechanism Failure4.3 MediumN/A0%Oct 23, 2026
CVE-2026-107685: Improper Certificate ValidationN/A9.1 Critical0%Oct 23, 2026
CVE-2026-105963: Insertion of Sensitive Information into Log FileN/A5.1 Medium1%Oct 23, 2026
2876-2900 of 416436