The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-105938: Incorrect AuthorizationN/A2.3 Low1%Oct 21, 2026
CVE-2026-105937: Missing AuthorizationN/A8.7 High0%Oct 21, 2026
CVE-2026-105936: Missing AuthorizationN/A5.3 Medium1%Oct 21, 2026
CVE-2026-105935: Missing AuthorizationN/A4.9 Medium0%Oct 21, 2026
CVE-2026-105934: Missing AuthorizationN/A7.2 High0%Oct 21, 2026
CVE-2026-105933: Not Failing SecurelyN/A2.3 Low0%Oct 21, 2026
CVE-2026-105932: Missing AuthorizationN/A2.3 Low1%Oct 21, 2026
CVE-2026-105931: Missing AuthorizationN/A2.3 Low1%Oct 21, 2026
CVE-2025-55702: Inconsistent Interpretation of HTTP Requests8.7 High7.0 High0%Oct 21, 2026
CVE-2025-31699: Inconsistent Interpretation of HTTP Requests8.9 High9.1 Critical0%Oct 21, 2026
CVE-2026-92210: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Oct 21, 2026
CVE-2026-92209: Insufficient Entropy7.8 HighN/A0%Oct 21, 2026
CVE-2026-92208: Heap-based Buffer Overflow8.8 HighN/A1%Oct 21, 2026
CVE-2026-92207: Improper Control of Generation of Code8.8 HighN/A1%Oct 21, 2026
CVE-2026-92206: Use of Externally-Controlled Input to Select Classes or Code8.8 HighN/A0%Oct 21, 2026
CVE-2026-92205: Improper Limitation of a Pathname to a Restricted Directory6.1 MediumN/A0%Oct 21, 2026
CVE-2026-92204: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Oct 21, 2026
CVE-2026-92203: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Oct 21, 2026
CVE-2026-92202: Uncontrolled Search Path Element7.8 HighN/A0%Oct 21, 2026
CVE-2026-92183: Stack-based Buffer Overflow7.8 HighN/A0%Oct 21, 2026
CVE-2026-89035: Insufficient Session Expiration7.4 High9.1 Critical0%Oct 21, 2026
CVE-2026-114493: Server-Side Request Forgery (SSRF)8.6 High9.2 Critical0%Oct 21, 2026
CVE-2026-114492: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.0 High1%Oct 21, 2026
CVE-2026-114264: Improper Neutralization of Special Elements used in an SQL Command4.7 Medium2.0 Low0%Oct 21, 2026
CVE-2026-114263: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 21, 2026
3601-3625 of 413502