The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-97785: Improper Authentication10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-108456: Server-Side Request Forgery (SSRF)7.7 HighN/A1%Oct 22, 2026
CVE-2026-105014: Improper Neutralization of Special Elements used in a Command9.1 CriticalN/A1%Oct 22, 2026
CVE-2026-115419: Exposure of Data Element to Wrong Session8.1 High8.6 High0%Oct 22, 2026
CVE-2026-114625: Improper Neutralization of Special Elements used in an SQL Command9.9 Critical9.4 Critical1%Oct 22, 2026
CVE-2026-114614: URL Redirection to Untrusted Site2.6 LowN/A0%Oct 22, 2026
CVE-2026-114583: Undefined Security WeaknessN/A6.9 Medium0%Oct 22, 2026
CVE-2026-115417: Memory Allocation with Excessive Size Value7.5 High8.2 High0%Oct 22, 2026
CVE-2026-115509: Incorrect Authorization4.2 Medium2.3 Low0%Oct 22, 2026
CVE-2026-115508: Inefficient Regular Expression Complexity6.5 Medium7.1 High0%Oct 22, 2026
CVE-2026-115507: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Oct 22, 2026
CVE-2026-115506: Improper Restriction of Recursive Entity References in DTDs7.5 High8.7 High0%Oct 22, 2026
CVE-2026-115505: Integer Overflow or Wraparound7.6 High7.2 High0%Oct 22, 2026
CVE-2026-115504: Out-of-bounds Write7.8 High8.5 High0%Oct 22, 2026
CVE-2026-115503: Improper Handling of Highly Compressed Data (Data Amplification)5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-115398: Allocation of Resources Without Limits or Throttling5.5 Medium6.8 Medium0%Oct 22, 2026
CVE-2026-112332: Improper Handling of Exceptional Conditions7.5 High8.7 High1%Oct 22, 2026
CVE-2026-112331: Improper Handling of Exceptional Conditions7.5 High8.7 High1%Oct 22, 2026
CVE-2026-112330: Improper Handling of Exceptional Conditions7.5 High8.7 High1%Oct 22, 2026
CVE-2026-95721: Improper Restriction of Operations within the Bounds of a Memory Buffer3.3 LowN/A0%Oct 22, 2026
CVE-2026-95720: Improper Restriction of Operations within the Bounds of a Memory Buffer4.4 MediumN/A0%Oct 22, 2026
CVE-2026-95719: Incorrect Privilege Assignment4.9 MediumN/A0%Oct 22, 2026
CVE-2026-95718: Improper Authentication5.3 MediumN/A0%Oct 22, 2026
CVE-2026-95717: Improper Neutralization of Input During Web Page Generation5.5 MediumN/A0%Oct 22, 2026
CVE-2026-95716: Improper Privilege Management6.5 MediumN/A0%Oct 22, 2026
3026-3050 of 416436