The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-84913: Missing Authorization4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84912: Missing Authorization4.6 MediumN/A0%Oct 22, 2026
CVE-2026-84911: Improper Neutralization of Input During Web Page Generation3.1 LowN/A0%Oct 22, 2026
CVE-2026-84910: Missing Authorization4.2 MediumN/A0%Oct 22, 2026
CVE-2026-81163: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Oct 22, 2026
CVE-2026-16648: Insertion of Sensitive Information into Log File3.8 LowN/A0%Oct 22, 2026
CVE-2026-114728: Incomplete List of Disallowed Inputs5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114727: Inclusion of Functionality from Untrusted Control Sphere8.3 HighN/A0%Oct 22, 2026
CVE-2026-114726: Improper Control of Resource Identifiers5.8 MediumN/A0%Oct 22, 2026
CVE-2026-114725: Improper Control of Resource Identifiers5.0 MediumN/A0%Oct 22, 2026
CVE-2026-114724: Deserialization of Untrusted Data7.4 HighN/A0%Oct 22, 2026
CVE-2026-114723: Allocation of Resources Without Limits or Throttling3.7 LowN/A0%Oct 22, 2026
CVE-2026-114722: Incorrect Resource Transfer Between Spheres6.5 MediumN/A0%Oct 22, 2026
CVE-2026-114721: Incorrect Authorization3.1 LowN/A0%Oct 22, 2026
CVE-2026-114720: Improper Neutralization of CRLF Sequences7.1 HighN/A1%Oct 22, 2026
CVE-2026-114719: Cross-Site Request Forgery (CSRF)3.7 LowN/A0%Oct 22, 2026
CVE-2026-114718: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 22, 2026
CVE-2026-114717: Improper Control of Resource Identifiers4.0 MediumN/A0%Oct 22, 2026
CVE-2026-114716: Improper Control of Resource Identifiers8.5 HighN/A0%Oct 22, 2026
CVE-2026-114715: Incorrect Authorization6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114664: Improper Neutralization of Special Elements used in an SQL Command7.1 High7.1 High0%Oct 22, 2026
CVE-2026-114663: Use of Incorrectly-Resolved Name or Reference8.4 High8.6 High0%Oct 22, 2026
CVE-2026-114662: Cross-Site Request Forgery (CSRF)8.1 High8.6 High0%Oct 22, 2026
CVE-2026-114661: Missing Authorization8.5 High9.0 Critical0%Oct 22, 2026
CVE-2026-114660: Use of Externally-Controlled Input to Select Classes or Code6.3 Medium7.0 High0%Oct 22, 2026
3426-3450 of 416436