The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-87943: Missing Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-87942: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-87941: Undefined Security WeaknessN/AN/A0%Oct 22, 2026
CVE-2026-87940: Use of Web Browser Cache Containing Sensitive Information5.4 MediumN/A0%Oct 22, 2026
CVE-2026-87939: Improper Neutralization of Input During Web Page Generation4.2 MediumN/A0%Oct 22, 2026
CVE-2026-87938: Improper Neutralization of Special Elements used in an SQL CommandN/AN/A0%Oct 22, 2026
CVE-2026-87937: URL Redirection to Untrusted Site6.5 MediumN/A0%Oct 22, 2026
CVE-2026-87936: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84924: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 22, 2026
CVE-2026-84923: Authentication Bypass Using an Alternate Path or Channel6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84921: Missing Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84920: Incorrect Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84919: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84918: Improper Verification of Cryptographic Signature3.7 LowN/A0%Oct 22, 2026
CVE-2026-84917: Incorrect Authorization6.5 MediumN/A0%Oct 22, 2026
CVE-2026-84916: Missing Authorization3.7 LowN/A0%Oct 22, 2026
CVE-2026-84915: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84914: Missing Authorization5.3 MediumN/A0%Oct 22, 2026
CVE-2026-84913: Missing Authorization4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84912: Missing Authorization4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84911: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Oct 22, 2026
CVE-2026-84910: Missing Authorization4.2 MediumN/A0%Oct 22, 2026
CVE-2026-81163: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Oct 22, 2026
CVE-2026-16648: Insertion of Sensitive Information into Log File3.8 LowN/A0%Oct 22, 2026
CVE-2026-114728: Incomplete List of Disallowed Inputs5.3 MediumN/A0%Oct 22, 2026
3426-3450 of 417776