The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114605: Uncontrolled Recursion7.5 HighN/A0%Oct 22, 2026
CVE-2026-104068: Improper Link Resolution Before File Access7.2 High8.6 High1%Oct 22, 2026
CVE-2026-94482: Allocation of Resources Without Limits or ThrottlingN/A8.2 High0%Oct 22, 2026
CVE-2026-51954: Undefined Security WeaknessN/AN/A1%Oct 22, 2026
CVE-2026-115496: Generation of Error Message Containing Sensitive InformationN/A6.9 Medium0%Oct 22, 2026
CVE-2026-115494: Cross-Site Request Forgery (CSRF)N/A5.3 Medium0%Oct 22, 2026
CVE-2026-115482: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Oct 22, 2026
CVE-2026-115454: Allocation of Resources Without Limits or ThrottlingN/A5.3 Medium0%Oct 22, 2026
CVE-2026-115453: Authorization Bypass Through User-Controlled KeyN/A7.1 High0%Oct 22, 2026
CVE-2026-115450: External Control of Assumed-Immutable Web ParameterN/A7.1 High0%Oct 22, 2026
CVE-2026-114603: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114487: Missing AuthorizationN/AN/A0%Oct 22, 2026
CVE-2026-114486: Incorrect AuthorizationN/AN/A0%Oct 22, 2026
CVE-2026-114485: Insertion of Sensitive Information Into Sent DataN/AN/A0%Oct 22, 2026
CVE-2026-78846: Heap-based Buffer Overflow9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-78801: Stack-based Buffer Overflow4.3 MediumN/A0%Oct 22, 2026
CVE-2026-61791: Improper Neutralization of Script in Attributes in a Web Page7.4 HighN/A0%Oct 22, 2026
CVE-2026-16477: Deserialization of Untrusted DataN/A8.4 High0%Oct 22, 2026
CVE-2026-114515: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114510: Improper Encoding or Escaping of Output7.1 HighN/A0%Oct 22, 2026
CVE-2026-113872: Uncaught Exception7.5 HighN/A0%Oct 22, 2026
CVE-2026-111181: Uncaught Exception7.5 HighN/A0%Oct 22, 2026
CVE-2026-94502: Stack-based Buffer OverflowN/A7.5 High0%Oct 22, 2026
CVE-2026-92709: Improper Limitation of a Pathname to a Restricted Directory8.1 HighN/A0%Oct 22, 2026
CVE-2026-89410: Improper Validation of Specified Index, Position, or Offset in InputN/A5.1 Medium0%Oct 22, 2026
3201-3225 of 416436