The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114647: Improper Neutralization of Special Elements in Data Query Logic4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-114646: Improper Handling of Length Parameter Inconsistency6.5 Medium6.9 Medium0%Oct 22, 2026
CVE-2026-114644: Allocation of Resources Without Limits or Throttling5.9 Medium8.2 High0%Oct 22, 2026
CVE-2026-114643: Use of Multiple Resources with Duplicate Identifier5.4 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-114613: Missing Release of Memory after Effective Lifetime7.5 HighN/A0%Oct 22, 2026
CVE-2026-114612: Improper Privilege Management9.9 CriticalN/A0%Oct 22, 2026
CVE-2026-114519: Missing AuthorizationN/A8.6 High0%Oct 22, 2026
CVE-2026-113876: Incorrect Authorization4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-113875: Missing Authorization3.1 Low2.3 Low0%Oct 22, 2026
CVE-2025-69723: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 22, 2026
CVE-2022-51026: Authentication Bypass by Spoofing9.8 Critical9.3 Critical1%Oct 22, 2026
CVE-2026-114645: Integer Overflow or Wraparound5.2 Medium5.7 Medium0%Oct 22, 2026
CVE-2026-97635: Improper Neutralization of Input During Web Page Generation8.1 High8.6 High0%Oct 22, 2026
CVE-2026-93336: Missing AuthorizationN/A7.1 High0%Oct 22, 2026
CVE-2026-77157: Missing Support for Integrity Check6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-77156: Improper Limitation of a Pathname to a Restricted Directory6.4 Medium6.3 Medium0%Oct 22, 2026
CVE-2026-54532: Inclusion of Functionality from Untrusted Control Sphere6.9 MediumN/A0%Oct 22, 2026
CVE-2026-54238: Insufficient Session Expiration3.1 LowN/A0%Oct 22, 2026
CVE-2026-13599: Missing Authentication for Critical Function7.8 High5.8 Medium0%Oct 22, 2026
CVE-2026-115516: Undefined Security WeaknessN/A6.9 MediumN/AOct 22, 2026
CVE-2026-114611: Improper Certificate Validation9.1 CriticalN/A0%Oct 22, 2026
CVE-2026-114610: Uncontrolled Resource Consumption6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114609: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Oct 22, 2026
CVE-2026-113874: Incorrect Authorization8.1 High8.6 High0%Oct 22, 2026
CVE-2026-113873: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High1%Oct 22, 2026
3176-3200 of 416436