The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-115249: Improper Input Validation4.6 Medium2.0 Low0%Oct 22, 2026
CVE-2026-115248: Improper Enforcement of Behavioral Workflow5.4 Medium2.1 Low0%Oct 22, 2026
CVE-2026-115247: Missing Encryption of Sensitive Data4.3 Medium2.1 Low0%Oct 22, 2026
CVE-2026-113582: Improper Restriction of XML External Entity Reference7.5 High8.7 High0%Oct 22, 2026
CVE-2026-111497: Out-of-bounds Write9.8 Critical9.2 Critical88%Oct 22, 2026
CVE-2026-107079: Undefined Security WeaknessN/AN/A0%Oct 22, 2026
CVE-2026-115246: Improper Neutralization of Input During Web Page Generation3.5 Low2.0 Low0%Oct 22, 2026
CVE-2026-102785: Unrestricted Upload of File with Dangerous TypeN/A10.0 Critical1%Oct 22, 2026
CVE-2026-13411: Improper Check for Unusual or Exceptional Conditions4.3 MediumN/A0%Oct 22, 2026
CVE-2026-115334: Authorization Bypass Through User-Controlled Key6.8 Medium7.6 High0%Oct 22, 2026
CVE-2026-115333: Improper Authentication5.9 Medium8.2 High0%Oct 22, 2026
CVE-2026-115332: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115331: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115330: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115329: Authorization Bypass Through User-Controlled Key5.9 Medium6.0 Medium0%Oct 22, 2026
CVE-2026-115328: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 22, 2026
CVE-2026-115327: Access of Uninitialized Pointer5.3 Medium6.0 Medium0%Oct 22, 2026
CVE-2026-115326: Authorization Bypass Through User-Controlled Key5.4 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115325: Authorization Bypass Through User-Controlled Key8.3 High8.7 High0%Oct 22, 2026
CVE-2026-115324: Improper Neutralization of Special Elements used in an SQL Command8.1 High9.2 Critical0%Oct 22, 2026
CVE-2026-115323: Missing Authorization7.3 High6.9 Medium0%Oct 22, 2026
CVE-2026-115322: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115321: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-115319: Inefficient Algorithmic Complexity2.5 Low2.0 Low0%Oct 22, 2026
CVE-2026-115207: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Oct 22, 2026
3251-3275 of 417776