The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-76497: Insecure Temporary File6.6 MediumN/A0%Oct 21, 2026
CVE-2026-76496: Improper Link Resolution Before File Access7.0 HighN/A0%Oct 21, 2026
CVE-2026-76495: Incorrect Permission Assignment for Critical Resource7.8 HighN/A0%Oct 21, 2026
CVE-2026-76494: Improper Control of Generation of Code7.8 HighN/A0%Oct 21, 2026
CVE-2026-76493: Uncaught Exception7.5 HighN/A0%Oct 21, 2026
CVE-2026-76492: NULL Pointer Dereference7.5 HighN/A0%Oct 21, 2026
CVE-2026-76491: Reachable Assertion7.5 HighN/A0%Oct 21, 2026
CVE-2026-76490: Out-of-bounds Write8.6 HighN/A0%Oct 21, 2026
CVE-2026-76489: Missing Release of Memory after Effective Lifetime5.8 MediumN/A0%Oct 21, 2026
CVE-2026-76487: Exposed Dangerous Method or Function5.3 MediumN/A1%Oct 21, 2026
CVE-2026-76481: Improper Check or Handling of Exceptional Conditions7.5 HighN/A0%Oct 21, 2026
CVE-2026-76479: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Oct 21, 2026
CVE-2026-76478: Improper Access Control8.8 HighN/A0%Oct 21, 2026
CVE-2026-76477: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 21, 2026
CVE-2026-76476: Improper Input Validation8.8 HighN/A0%Oct 21, 2026
CVE-2026-76475: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A0%Oct 21, 2026
CVE-2026-76474: Improper Authentication9.8 CriticalN/A0%Oct 21, 2026
CVE-2026-76473: Improper Neutralization of Special Elements in Output Used by a Downstream Component9.8 CriticalN/A0%Oct 21, 2026
CVE-2026-76466: Use of Hard-coded Credentials9.8 CriticalN/A0%Oct 21, 2026
CVE-2026-76462: Improper Input Validation5.5 MediumN/A0%Oct 21, 2026
CVE-2026-76445: Loop with Unreachable Exit Condition5.3 MediumN/A1%Oct 21, 2026
CVE-2026-76435: Exposure of Sensitive System Information to an Unauthorized Control Sphere5.3 MediumN/A0%Oct 21, 2026
CVE-2026-53986: Use of Hard-coded Credentials5.3 Medium6.9 Medium0%Oct 21, 2026
CVE-2026-20356: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 21, 2026
CVE-2026-20291: Improper Privilege Management7.8 HighN/A0%Oct 21, 2026
3651-3675 of 416436