The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-87830: Improper Neutralization of Special Elements used in an Expression Language Statement9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-85532: Improper Input Validation7.5 HighN/A1%Sep 30, 2026
CVE-2026-94053: Improper Neutralization of Special Elements used in an LDAP Query9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-94052: Missing Critical Step in Authentication9.1 CriticalN/A0%Sep 30, 2026
CVE-2026-94029: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 30, 2026
CVE-2026-94002: Allocation of Resources Without Limits or Throttling7.5 HighN/A0%Sep 30, 2026
CVE-2026-93996: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 30, 2026
CVE-2026-93995: Improper Input Validation6.5 MediumN/A0%Sep 30, 2026
CVE-2026-93994: Missing Critical Step in Authentication8.1 HighN/A0%Sep 30, 2026
CVE-2026-77185: Authentication Bypass by Primary Weakness9.1 CriticalN/A1%Sep 30, 2026
CVE-2026-102511: Improper Verification of Source of a Communication ChannelN/A8.5 High0%Sep 30, 2026
CVE-2026-102510: Memory Allocation with Excessive Size ValueN/A8.7 High0%Sep 30, 2026
CVE-2026-102509: Memory Allocation with Excessive Size ValueN/A8.7 High0%Sep 30, 2026
CVE-2026-102508: Improper Verification of Cryptographic SignatureN/A9.2 Critical0%Sep 30, 2026
CVE-2026-97395: Missing Authorization8.1 HighN/A0%Sep 29, 2026
CVE-2026-81569: Improper Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-78214: Incorrect Authorization5.3 MediumN/A0%Sep 29, 2026
CVE-2026-71899: Incorrect Authorization6.5 MediumN/A0%Sep 29, 2026
CVE-2026-71898: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-71897: Incorrect Authorization4.3 MediumN/A0%Sep 29, 2026
CVE-2026-82804: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 29, 2026
CVE-2026-66083: Missing Authentication for Critical Function6.5 MediumN/A0%Sep 29, 2026
CVE-2026-102497: Uncontrolled Recursion7.5 HighN/A1%Sep 29, 2026
CVE-2026-102496: Uncontrolled Recursion7.5 HighN/A1%Sep 29, 2026
CVE-2026-102495: Uncontrolled Recursion7.5 HighN/A1%Sep 29, 2026
301-325 of 4429
‹›