The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-78335: Incorrect Authorization4.2 MediumN/A0%Oct 13, 2026
CVE-2026-6567: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and…4.3 MediumN/A0%Oct 13, 2026
CVE-2026-5954: GitLab: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and…4.2 MediumN/A0%Oct 13, 2026
CVE-2026-35001: Integer Overflow or Wraparound7.0 High7.1 High0%Oct 13, 2026
CVE-2026-16301: Incorrect Authorization8.5 HighN/A0%Oct 13, 2026
CVE-2026-16275: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-14814: Permissive Regular Expression8.2 HighN/A0%Oct 13, 2026
CVE-2026-14552: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-14210: Insufficient Granularity of Access Control4.3 MediumN/A0%Oct 13, 2026
CVE-2026-108956: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-108955: Out-of-bounds Read5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-108954: Buffer Copy without Checking Size of Input6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-108948: Improperly Controlled Modification of Dynamically-Determined Object Attributes5.4 Medium2.1 Low0%Oct 13, 2026
CVE-2026-108947: Deserialization of Untrusted Data5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision4.3 MediumN/A0%Oct 13, 2026
CVE-2026-104661: Incorrect Privilege Assignment4.3 MediumN/A0%Oct 13, 2026
CVE-2026-103549: Incorrect Authorization2.7 LowN/A0%Oct 13, 2026
CVE-2026-101168: Insertion of Sensitive Information into Log File6.2 MediumN/A0%Oct 13, 2026
CVE-2026-100755: Acceptance of Extraneous Untrusted Data With Trusted Data4.6 MediumN/A0%Oct 13, 2026
CVE-2026-100104: Server-Side Request Forgery (SSRF)3.5 LowN/A0%Oct 13, 2026
CVE-2026-89124: SAP_SE SAP HANA (Display Product Catalog Based on Customs Declaration): Display Product Catalog Based on Customs Declaration application does not perform sufficient authorization checks…4.3 MediumN/A0%Oct 13, 2026
CVE-2026-89122: SAP_SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal does not sufficiently validate input to a certain portal component6.1 MediumN/A0%Oct 13, 2026
CVE-2026-89121: SAP_SE SAP S/4HANA (Linear Asset Management RAP Business Object): SAP S/4HANA does not perform sufficient instance-level authorization checks for certain modification operations on…4.7 MediumN/A0%Oct 13, 2026
CVE-2026-89120: SAP_SE SAP ABAP Platform: A regression caused by an API change in SAP ABAP Platform reintroduces a previously fixed authorization weakness7.1 HighN/A0%Oct 13, 2026
CVE-2026-89118: SAP_SE SAP NetWeaver Enterprise Portal: SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to access restricted resources and retrieve…5.3 MediumN/A0%Oct 13, 2026
3351-3375 of 443854
‹›