The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-87951: Insecure Storage of Sensitive Information3.8 LowN/A0%Oct 22, 2026
CVE-2026-87950: Use of Hard-coded Credentials5.3 MediumN/A0%Oct 22, 2026
CVE-2026-87949: Improper Neutralization of Input During Web Page Generation3.3 LowN/A0%Oct 22, 2026
CVE-2026-87948: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Oct 22, 2026
CVE-2026-87947: Improper Verification of Cryptographic Signature4.8 MediumN/A0%Oct 22, 2026
CVE-2026-87946: Observable Timing Discrepancy4.8 MediumN/A0%Oct 22, 2026
CVE-2026-87945: URL Redirection to Untrusted Site5.4 MediumN/A0%Oct 22, 2026
CVE-2026-87944: Improper Certificate Validation4.8 MediumN/A0%Oct 22, 2026
CVE-2026-87943: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-87942: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-87941: Undefined Security WeaknessN/AN/A0%Oct 22, 2026
CVE-2026-87940: Use of Web Browser Cache Containing Sensitive Information5.4 MediumN/A0%Oct 22, 2026
CVE-2026-87939: Improper Neutralization of Input During Web Page Generation4.2 MediumN/A0%Oct 22, 2026
CVE-2026-87938: Improper Neutralization of Special Elements used in an SQL CommandN/AN/A0%Oct 22, 2026
CVE-2026-87937: URL Redirection to Untrusted Site6.5 MediumN/A0%Oct 22, 2026
CVE-2026-87936: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84924: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 22, 2026
CVE-2026-84923: Authentication Bypass Using an Alternate Path or Channel6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84921: Missing Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84920: Incorrect Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84919: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84918: Improper Verification of Cryptographic Signature3.7 LowN/A0%Oct 22, 2026
CVE-2026-84917: Incorrect Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84916: Missing Authorization3.7 LowN/A0%Oct 22, 2026
CVE-2026-84915: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
3401-3425 of 416436