The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-16762: Inefficient Algorithmic ComplexityN/A8.7 High1%Oct 23, 2026
CVE-2026-115657: Insertion of Sensitive Information into Log FileN/A4.8 Medium0%Oct 23, 2026
CVE-2026-112862: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 23, 2026
CVE-2026-112860: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 23, 2026
CVE-2026-112838: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-112837: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 23, 2026
CVE-2026-112835: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 23, 2026
CVE-2026-112825: Missing Authorization6.5 MediumN/A0%Oct 23, 2026
CVE-2026-112821: Missing Authorization6.5 MediumN/A0%Oct 23, 2026
CVE-2026-112359: Missing Authorization7.5 HighN/A0%Oct 23, 2026
CVE-2025-58403: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium1%Oct 23, 2026
CVE-2025-30054: Incorrect Permission Assignment for Critical ResourceN/A9.3 Critical0%Oct 23, 2026
CVE-2025-30053: Missing Authentication for Critical FunctionN/A6.9 Medium0%Oct 23, 2026
CVE-2025-30052: Authentication Bypass by SpoofingN/A8.8 High0%Oct 23, 2026
CVE-2025-30051: Incorrect Permission Assignment for Critical ResourceN/A6.8 Medium0%Oct 23, 2026
CVE-2025-30050: Improper Control of Generation of CodeN/A9.4 Critical0%Oct 23, 2026
CVE-2025-30049: Use of Password Hash With Insufficient Computational EffortN/A8.2 High0%Oct 23, 2026
CVE-2025-30047: Deserialization of Untrusted DataN/A9.4 Critical0%Oct 23, 2026
CVE-2025-30046: Execution with Unnecessary PrivilegesN/A9.0 Critical0%Oct 23, 2026
CVE-2025-30045: Improper Control of Generation of CodeN/A8.6 High0%Oct 23, 2026
CVE-2025-30043: Missing Authentication for Critical FunctionN/A7.1 High0%Oct 23, 2026
CVE-2026-25716: Missing Authorization7.1 High7.1 High0%Oct 23, 2026
CVE-2026-93489: Improper AuthenticationN/A8.7 High0%Oct 23, 2026
CVE-2026-75779: Improper Neutralization of Special Elements used in an OS CommandN/A8.6 High1%Oct 23, 2026
CVE-2026-75775: Improper Neutralization of Special Elements used in an OS CommandN/A7.7 High1%Oct 23, 2026
2926-2950 of 416436