The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76976: SAP_SE SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML): Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize…5.4 MediumN/A0%Oct 13, 2026
CVE-2026-76975: SAP_SE SAPUI5 (Support Assistant Overlay): Due to a DOM-Based Cross-Site Scripting (XSS) vulnerability, an unauthenticated attacker could generate a malicious…6.1 MediumN/A0%Oct 13, 2026
CVE-2026-76972: SAP_SE SAP Manufacturing Integration and Intelligence: Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could…6.5 MediumN/A0%Oct 13, 2026
CVE-2026-58249: SAP_SE SAP NetWeaver and SAP Web Dispatcher (Internet Communication Manager): SAP NetWeaver and SAP Web Dispatcher do not properly validate certain fields in specially crafted requests handled by…7.5 HighN/A0%Oct 13, 2026
CVE-2026-58242: SAP_SE SAP Cloud Connector: SAP Cloud Connector contains an improper authorization check, which could be exploited by a low-privileged attacker…3.5 LowN/A0%Oct 13, 2026
CVE-2026-108945: Improper Control of Generation of Code5.3 Medium4.8 Medium0%Oct 13, 2026
CVE-2026-108944: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108943: Improper Control of Generation of Code5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-108942: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Oct 13, 2026
CVE-2026-96119: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute…9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-93886: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary script code due to…5.4 MediumN/A0%Oct 13, 2026
CVE-2026-81858: IBM i: IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service and obtain…8.1 HighN/A0%Oct 13, 2026
CVE-2026-19938: Use After Free5.9 MediumN/A0%Oct 13, 2026
CVE-2026-19937: Missing Release of Resource after Effective Lifetime5.7 MediumN/A0%Oct 13, 2026
CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization4.8 MediumN/A0%Oct 13, 2026
CVE-2026-18343: Improper Privilege Management4.4 MediumN/A0%Oct 13, 2026
CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17487: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 13, 2026
CVE-2026-108941: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108940: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-108939: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-93892: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive…8.1 HighN/A0%Oct 12, 2026
CVE-2026-93891: IBM TRIRIGA Application Platform: IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive…7.6 HighN/A0%Oct 12, 2026
CVE-2026-92832: IBM Aspera Enterprise WebApps: IBM Aspera Enterprise WebApps 1.0.0 through 1.0.6 could allow a local attacker to obtain sensitive information due to…5.1 MediumN/A0%Oct 12, 2026
3776-3800 of 735990
‹›