The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109950: Out-of-bounds Read4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109949: Improper Restriction of Excessive Authentication Attempts6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109948: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109947: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109946: Reachable Assertion6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109945: Concurrent Execution using Shared Resource with Improper Synchronization5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109944: Reachable Assertion6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109943: Double Free6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109942: NULL Pointer Dereference6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109941: Loop with Unreachable Exit Condition6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109940: Stack-based Buffer Overflow4.3 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-109939: NULL Pointer Dereference6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109938: Integer Overflow or Wraparound6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109680: Out-of-bounds Write5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109679: NULL Pointer Dereference5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109678: Reachable Assertion6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109677: Out-of-bounds Read6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-109676: Use After Free8.8 High8.7 High0%Oct 13, 2026
CVE-2026-109520: Privilege Defined With Unsafe Actions8.8 High9.3 Critical0%Oct 13, 2026
CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory8.3 High6.9 Medium1%Oct 13, 2026
CVE-2026-109410: Incorrect Calculation2.4 Low4.8 Medium0%Oct 13, 2026
CVE-2026-109409: Improper Neutralization of Special Elements used in a Command5.3 Medium1.9 Low1%Oct 13, 2026
CVE-2026-107832: Improper Handling of Case Sensitivity3.7 LowN/A0%Oct 13, 2026
CVE-2026-103499: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 13, 2026
CVE-2026-0893: Exposure of Sensitive Information Due to Incompatible PoliciesN/A5.8 Medium0%Oct 13, 2026
2976-3000 of 443732
‹›