The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-113811: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 21, 2026
CVE-2026-85518: Improper Limitation of a Pathname to a Restricted Directory6.1 MediumN/A0%Oct 21, 2026
CVE-2026-114438: Improper Authentication4.2 MediumN/A0%Oct 21, 2026
CVE-2026-114376: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114375: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114374: Server-Side Request Forgery (SSRF)4.3 Medium2.1 Low0%Oct 21, 2026
CVE-2026-114362: Server-Side Request Forgery (SSRF)6.3 Medium5.3 Medium0%Oct 21, 2026
CVE-2026-114136: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Oct 21, 2026
CVE-2026-114135: Missing Authorization8.8 HighN/A0%Oct 21, 2026
CVE-2026-112408: Improper Verification of Source of a Communication Channel8.1 High9.4 Critical1%Oct 21, 2026
CVE-2026-112381: NULL Pointer Dereference5.9 Medium8.2 High0%Oct 21, 2026
CVE-2026-111817: Uncontrolled Resource Consumption5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-111815: Improper Certificate Validation10.0 Critical7.8 High0%Oct 21, 2026
CVE-2026-111814: Improper Certificate Validation10.0 Critical7.8 High0%Oct 21, 2026
CVE-2026-111812: Incorrect Authorization10.0 Critical7.0 High0%Oct 21, 2026
CVE-2026-111811: Missing Authentication for Critical Function9.0 Critical9.4 Critical0%Oct 21, 2026
CVE-2026-111810: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 21, 2026
CVE-2026-111809: Inconsistent Interpretation of HTTP Requests9.3 Critical6.9 Medium0%Oct 21, 2026
CVE-2026-111808: Integer Underflow (Wrap or Wraparound)8.6 High7.7 High0%Oct 21, 2026
CVE-2026-111805: Uncontrolled Resource Consumption8.6 High7.7 High0%Oct 21, 2026
CVE-2026-79976: NULL Pointer Dereference7.1 HighN/A0%Oct 21, 2026
CVE-2026-78119: Out-of-bounds Write6.3 MediumN/A0%Oct 21, 2026
CVE-2026-78118: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Oct 21, 2026
CVE-2026-78117: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Oct 21, 2026
CVE-2026-78116: Double Free5.2 MediumN/A0%Oct 21, 2026
3576-3600 of 417776