The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-86843: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A1%Sep 29, 2026
CVE-2026-81930: Insufficiently Protected Credentials6.3 MediumN/A0%Sep 29, 2026
CVE-2026-81914: Improper Neutralization of Special Elements in Data Query Logic4.3 MediumN/A1%Sep 29, 2026
CVE-2026-81862: Insertion of Sensitive Information into Log File6.5 MediumN/A0%Sep 29, 2026
CVE-2026-92142: Missing Authorization8.8 HighN/A1%Sep 29, 2026
CVE-2026-91085: Missing Authorization6.3 MediumN/A0%Sep 29, 2026
CVE-2026-91048: Missing Authorization9.8 CriticalN/A1%Sep 29, 2026
CVE-2026-91012: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A1%Sep 29, 2026
CVE-2026-96740: Use of Externally-Controlled Input to Select Classes or Code6.5 MediumN/A0%Sep 28, 2026
CVE-2026-101292: Use of Externally-Controlled Input to Select Classes or Code8.2 HighN/A0%Sep 28, 2026
CVE-2026-91006: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Sep 28, 2026
CVE-2026-90979: Improper Neutralization of Special Elements used in an LDAP Query7.3 HighN/A0%Sep 28, 2026
CVE-2026-86507: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 28, 2026
CVE-2026-91206: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 28, 2026
CVE-2026-91204: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 28, 2026
CVE-2026-82546: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 28, 2026
CVE-2026-82387: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 28, 2026
CVE-2026-82386: Improper Restriction of XML External Entity Reference7.7 HighN/A0%Sep 28, 2026
CVE-2026-82385: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Sep 28, 2026
CVE-2026-82384: Deserialization of Untrusted Data9.8 CriticalN/A1%Sep 28, 2026
CVE-2026-82383: Missing Authentication for Critical Function8.2 HighN/A0%Sep 28, 2026
CVE-2026-82382: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Sep 28, 2026
CVE-2026-82381: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Sep 28, 2026
CVE-2026-82380: Cross-Site Request Forgery (CSRF)8.1 HighN/A0%Sep 28, 2026
CVE-2026-82379: Authentication Bypass by Capture-replay7.7 HighN/A0%Sep 28, 2026
326-350 of 4429
‹›