The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114617: Authentication Bypass by Capture-replay4.2 MediumN/A0%Oct 22, 2026
CVE-2026-114616: Improper Authentication7.4 HighN/A0%Oct 22, 2026
CVE-2026-114615: Incomplete List of Disallowed Inputs7.4 HighN/A0%Oct 22, 2026
CVE-2026-111594: Cleartext Transmission of Sensitive Information8.1 High9.2 Critical0%Oct 22, 2026
CVE-2026-111100: Missing Authentication for Critical Function5.3 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-109122: Improper Neutralization of Special Elements used in an OS Command9.1 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-105265: Improper Limitation of a Pathname to a Restricted Directory5.3 Medium6.0 Medium0%Oct 22, 2026
CVE-2026-110063: Improper Link Resolution Before File Access10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-83938: Missing Authentication for Critical Function10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-96185: Stack-based Buffer Overflow7.5 HighN/A1%Oct 22, 2026
CVE-2026-97785: Improper Authentication10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-108456: Server-Side Request Forgery (SSRF)7.7 HighN/A1%Oct 22, 2026
CVE-2026-105014: Improper Neutralization of Special Elements used in a Command9.1 CriticalN/A1%Oct 22, 2026
CVE-2026-115419: Exposure of Data Element to Wrong Session8.1 High8.6 High0%Oct 22, 2026
CVE-2026-114625: Improper Neutralization of Special Elements used in an SQL Command9.9 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-114614: URL Redirection to Untrusted Site2.6 LowN/A0%Oct 22, 2026
CVE-2026-114583: Undefined Security WeaknessN/A6.9 Medium0%Oct 22, 2026
CVE-2026-115417: Memory Allocation with Excessive Size Value7.5 High8.2 High0%Oct 22, 2026
CVE-2026-115509: Incorrect Authorization4.2 Medium2.3 Low0%Oct 22, 2026
CVE-2026-115508: Inefficient Regular Expression Complexity6.5 Medium7.1 High0%Oct 22, 2026
CVE-2026-115507: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Oct 22, 2026
CVE-2026-115506: Improper Restriction of Recursive Entity References in DTDs7.5 High8.7 High0%Oct 22, 2026
CVE-2026-115505: Integer Overflow or Wraparound7.6 High7.2 High0%Oct 22, 2026
CVE-2026-115504: Out-of-bounds Write7.8 High8.5 High0%Oct 22, 2026
CVE-2026-115503: Improper Handling of Highly Compressed Data (Data Amplification)5.5 Medium6.8 Medium0%Oct 22, 2026
3001-3025 of 416436