The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-20236: Incorrect Calculation7.5 HighN/A0%Oct 21, 2026
CVE-2026-20221: NULL Pointer Dereference5.8 MediumN/A1%Oct 21, 2026
CVE-2026-20218: Stack-based Buffer Overflow5.8 MediumN/A1%Oct 21, 2026
CVE-2026-20197: Improper Restriction of Operations within the Bounds of a Memory Buffer5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20179: Wrap-around Error5.8 MediumN/A0%Oct 21, 2026
CVE-2026-20043: Out-of-bounds Write9.0 CriticalN/A0%Oct 21, 2026
CVE-2026-20019: Loop with Unreachable Exit Condition5.8 MediumN/A1%Oct 21, 2026
CVE-2026-20011: Buffer Access with Incorrect Length Value5.8 MediumN/A1%Oct 21, 2026
CVE-2026-114261: Missing Authentication for Critical Function7.3 High5.5 Medium1%Oct 21, 2026
CVE-2026-114260: Missing Authentication for Critical Function6.5 Medium5.5 Medium1%Oct 21, 2026
CVE-2026-114259: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114258: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-114123: Missing Authentication for Critical Function7.5 HighN/A0%Oct 21, 2026
CVE-2026-114122: Out-of-bounds Read3.9 LowN/A0%Oct 21, 2026
CVE-2026-114121: Origin Validation Error5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113800: Origin Validation Error5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113799: Insertion of Sensitive Information into Log File5.3 MediumN/A0%Oct 21, 2026
CVE-2026-113798: Origin Validation Error5.4 MediumN/A0%Oct 21, 2026
CVE-2026-113797: Missing Authorization3.1 LowN/A1%Oct 21, 2026
CVE-2026-113796: Cross-Site Request Forgery (CSRF)4.2 MediumN/A0%Oct 21, 2026
CVE-2026-114490: Incorrect Authorization7.8 HighN/A0%Oct 21, 2026
CVE-2026-114489: Missing Authorization8.1 HighN/A0%Oct 21, 2026
CVE-2026-114479: Not Failing Securely5.8 MediumN/A0%Oct 21, 2026
CVE-2026-114478: Unintended Proxy or Intermediary5.9 MediumN/A0%Oct 21, 2026
CVE-2026-114477: Missing Authorization4.3 MediumN/A0%Oct 21, 2026
3676-3700 of 416436