The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109717: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109716: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109715: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109714: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109713: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109712: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109711: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109710: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109709: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Oct 13, 2026
CVE-2026-109708: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109707: Use After Free9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-109706: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109705: Use After Free9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-109704: Undefined Security Weakness8.8 HighN/A0%Oct 13, 2026
CVE-2026-109407: Concurrent Execution using Shared Resource with Improper Synchronization3.1 Low2.3 Low0%Oct 13, 2026
CVE-2026-109406: Undefined Security Weakness5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109405: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109404: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-109403: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-94410: Bender Customer&Partner: A low privileged remote attacker is able to view a list of roles that should only be accessible to administrators4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89279: AuthTake Technology Inc. authtake: Cross-Site request forgery (CSRF) vulnerability in AuthTake Technology Inc6.5 MediumN/A0%Oct 13, 2026
CVE-2026-63316: Payload Payload CMS: A SQL injection vulnerability has been identified in Payload CMSN/A8.7 High0%Oct 13, 2026
CVE-2026-109832: Loop with Unreachable Exit Condition7.5 HighN/A0%Oct 13, 2026
CVE-2026-109402: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109190: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
3101-3125 of 443742
‹›