The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-85080: Stack-based Buffer OverflowN/A6.0 Medium0%Oct 22, 2026
CVE-2026-85079: Stack-based Buffer OverflowN/A7.5 High0%Oct 22, 2026
CVE-2026-66282: Uncontrolled RecursionN/A6.0 Medium0%Oct 22, 2026
CVE-2026-66281: Loop with Unreachable Exit ConditionN/A6.0 Medium0%Oct 22, 2026
CVE-2026-66279: Improper Verification of Source of a Communication ChannelN/A7.2 High0%Oct 22, 2026
CVE-2026-115411: Server-Side Request Forgery (SSRF)5.0 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115400: Cleartext Storage of Sensitive Information4.4 Medium6.7 Medium0%Oct 22, 2026
CVE-2026-115249: Improper Input Validation4.6 Medium2.0 Low0%Oct 22, 2026
CVE-2026-115248: Improper Enforcement of Behavioral Workflow5.4 Medium2.1 Low0%Oct 22, 2026
CVE-2026-115247: Missing Encryption of Sensitive Data4.3 Medium2.1 Low0%Oct 22, 2026
CVE-2026-113582: Improper Restriction of XML External Entity Reference7.5 High8.7 High0%Oct 22, 2026
CVE-2026-111497: Out-of-bounds Write9.8 Critical9.2 Critical55%Oct 22, 2026
CVE-2026-107079: Undefined Security WeaknessN/AN/A0%Oct 22, 2026
CVE-2026-115246: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Oct 22, 2026
CVE-2026-102785: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Oct 22, 2026
CVE-2026-13411: Improper Check for Unusual or Exceptional Conditions4.3 MediumN/A0%Oct 22, 2026
CVE-2026-115334: Authorization Bypass Through User-Controlled Key6.8 Medium7.6 High0%Oct 22, 2026
CVE-2026-115333: Improper Authentication5.9 Medium8.2 High0%Oct 22, 2026
CVE-2026-115332: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115331: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115330: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115329: Authorization Bypass Through User-Controlled Key5.9 Medium6.0 Medium0%Oct 22, 2026
CVE-2026-115328: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115327: Access of Uninitialized Pointer5.3 Medium6.0 Medium0%Oct 22, 2026
CVE-2026-115326: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 22, 2026
3226-3250 of 416436