The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-104334: Improper Control of Generation of Code9.8 CriticalN/A1%Oct 7, 2026
CVE-2026-103360: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 7, 2026
CVE-2026-101331: Insufficiently Protected Credentials6.5 MediumN/A0%Oct 7, 2026
CVE-2026-101329: Improper Access Control6.5 MediumN/A0%Oct 7, 2026
CVE-2026-104335: Improper Access Control8.8 HighN/A1%Oct 7, 2026
CVE-2026-105839: Integer Overflow or Wraparound7.8 High8.5 High0%Oct 6, 2026
CVE-2026-105838: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 6, 2026
CVE-2026-105837: Integer Overflow or Wraparound7.8 High8.5 High0%Oct 6, 2026
CVE-2026-98366: Undefined Security Weakness7.8 HighN/A0%Oct 6, 2026
CVE-2026-98365: Undefined Security Weakness9.8 CriticalN/A0%Oct 6, 2026
CVE-2026-84842: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Sep 29, 2026
CVE-2026-84440: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 29, 2026
CVE-2026-84436: Improper Neutralization of Special Elements used in an OS Command9.1 CriticalN/A1%Sep 29, 2026
CVE-2026-84422: Improper Neutralization of Special Elements used in an OS Command7.2 HighN/A1%Sep 29, 2026
CVE-2026-84421: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Sep 29, 2026
CVE-2026-84414: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Sep 29, 2026
CVE-2026-93306: Out-of-bounds Read7.1 HighN/A0%Sep 25, 2026
CVE-2026-93030: Improper Restriction of XML External Entity Reference6.5 MediumN/A0%Sep 25, 2026
CVE-2026-84882: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Sep 25, 2026
CVE-2026-84862: Deserialization of Untrusted Data7.2 HighN/A0%Sep 25, 2026
CVE-2026-85542: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Sep 25, 2026
CVE-2026-85029: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Sep 25, 2026
CVE-2026-84893: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Sep 25, 2026
CVE-2026-84884: Plaintext Storage of a Password8.8 HighN/A0%Sep 25, 2026
CVE-2026-97526: Undefined Security WeaknessN/AN/A0%Sep 25, 2026
276-300 of 9774
‹›