The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-114639: Improper Authentication8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114638: Improper Authentication8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114637: Exposure of Data Element to Wrong Session8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114636: Missing Authentication for Critical Function8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114635: Authentication Bypass Using an Alternate Path or Channel8.7 High7.0 High0%Oct 22, 2026
CVE-2026-114634: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Oct 22, 2026
CVE-2026-114633: Incorrect Authorization6.5 Medium7.0 High0%Oct 22, 2026
CVE-2026-114577: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 22, 2026
CVE-2026-114576: Use of Insufficiently Random Values3.7 Low2.9 Low1%Oct 22, 2026
CVE-2026-16255: Incorrect Authorization5.9 MediumN/A0%Oct 22, 2026
CVE-2026-15723: Improper Neutralization of Special Elements used in an LDAP Query8.2 HighN/A0%Oct 22, 2026
CVE-2026-14288: Use of Incorrectly-Resolved Name or Reference3.1 LowN/A0%Oct 22, 2026
CVE-2026-13319: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 22, 2026
CVE-2026-12664: Incorrect Authorization6.8 MediumN/A0%Oct 22, 2026
CVE-2026-114714: Relative Path Traversal5.3 MediumN/A0%Oct 22, 2026
CVE-2026-114575: Improper Neutralization of Special Elements used in a Command10.0 Critical9.3 Critical2%Oct 22, 2026
CVE-2026-114574: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Oct 22, 2026
CVE-2026-112378: Use of Less Trusted Source4.3 MediumN/A0%Oct 22, 2026
CVE-2026-112326: Improper Cleanup on Thrown Exception3.1 LowN/A0%Oct 22, 2026
CVE-2026-112212: Inconsistent Interpretation of HTTP Requests7.5 HighN/A0%Oct 22, 2026
CVE-2026-110264: Integer Overflow or Wraparound10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-105777: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Oct 22, 2026
CVE-2026-105711: Use of Cache Containing Sensitive Information3.5 LowN/A0%Oct 22, 2026
CVE-2026-103515: Incorrect Authorization2.7 LowN/A0%Oct 22, 2026
CVE-2025-65200: Improper Neutralization of Input During Web Page GenerationN/AN/A0%Oct 22, 2026
3476-3500 of 417776