The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115536: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 23, 2026
CVE-2026-115535: Improper Neutralization of Input During Web Page Generation2.4 Low1.9 Low0%Oct 23, 2026
CVE-2026-115486: Out-of-bounds Read7.1 HighN/A0%Oct 23, 2026
CVE-2026-115485: Out-of-bounds Read6.3 MediumN/A0%Oct 23, 2026
CVE-2026-115484: Out-of-bounds Read7.6 HighN/A0%Oct 23, 2026
CVE-2026-115534: Improper Neutralization of Input During Web Page Generation4.3 Medium2.1 Low0%Oct 23, 2026
CVE-2026-92450: Use of Hard-coded Credentials7.5 High8.7 High0%Oct 22, 2026
CVE-2026-110825: Missing Authentication for Critical Function7.5 High8.7 High0%Oct 22, 2026
CVE-2026-110491: NULL Pointer Dereference7.5 High6.9 Medium1%Oct 22, 2026
CVE-2026-110243: Improper Neutralization of Special Elements used in an OS Command9.9 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-107861: Improper Neutralization of Special Elements used in an OS Command9.9 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-96616: Insufficient Session Expiration6.5 Medium8.3 High0%Oct 22, 2026
CVE-2026-115449: Exposure of Sensitive Information to an Unauthorized Actor3.5 LowN/A0%Oct 22, 2026
CVE-2026-115424: UNIX Symbolic Link (Symlink) Following5.5 MediumN/A0%Oct 22, 2026
CVE-2026-115221: Incorrect Authorization5.4 MediumN/A0%Oct 22, 2026
CVE-2026-114620: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Oct 22, 2026
CVE-2026-114619: Incorrect Authorization4.6 MediumN/A0%Oct 22, 2026
CVE-2026-114618: Improper Authentication6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114617: Authentication Bypass by Capture-replay4.2 MediumN/A0%Oct 22, 2026
CVE-2026-114616: Improper Authentication7.4 HighN/A0%Oct 22, 2026
CVE-2026-114615: Incomplete List of Disallowed Inputs7.4 HighN/A0%Oct 22, 2026
CVE-2026-111594: Cleartext Transmission of Sensitive Information8.1 High9.2 Critical0%Oct 22, 2026
CVE-2026-111100: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-109122: Improper Neutralization of Special Elements used in an OS Command9.1 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-105265: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.0 Medium0%Oct 22, 2026
3001-3025 of 417776