The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115326: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115325: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 22, 2026
CVE-2026-115324: Improper Neutralization of Special Elements used in an SQL Command8.1 High9.2 Critical0%Oct 22, 2026
CVE-2026-115323: Missing Authorization7.3 High6.9 Medium0%Oct 22, 2026
CVE-2026-115322: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115321: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115319: Inefficient Algorithmic Complexity2.5 Low2.0 Low0%Oct 22, 2026
CVE-2026-115207: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Oct 22, 2026
CVE-2026-114665: Improper Link Resolution Before File Access6.5 Medium7.1 High0%Oct 22, 2026
CVE-2026-112842: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-112832: Improper Control of Filename for Include/Require Statement in PHP Program9.8 CriticalN/A0%Oct 22, 2026
CVE-2026-112822: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 22, 2026
CVE-2026-112820: Improper Control of Filename for Include/Require Statement in PHP Program8.1 HighN/A0%Oct 22, 2026
CVE-2026-112313: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 22, 2026
CVE-2026-111079: Exposure of Sensitive System Information to an Unauthorized Control Sphere7.4 HighN/A0%Oct 22, 2026
CVE-2025-71434: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2024-58396: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2024-58394: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2024-58393: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2023-54413: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 Medium0%Oct 22, 2026
CVE-2022-51025: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Oct 22, 2026
CVE-2022-51024: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 High0%Oct 22, 2026
CVE-2022-51023: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
CVE-2022-51022: Improper Limitation of a Pathname to a Restricted Directory9.1 Critical8.8 High1%Oct 22, 2026
CVE-2022-51021: Improper Neutralization of Special Elements used in an SQL Command8.2 High8.8 High0%Oct 22, 2026
3251-3275 of 416436