The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-66392: Improper Validation of Certificate with Host MismatchN/AN/A0%Oct 21, 2026
CVE-2026-61916: Out-of-bounds ReadN/AN/A0%Oct 21, 2026
CVE-2026-61902: Uncontrolled Resource ConsumptionN/AN/A0%Oct 21, 2026
CVE-2026-59562: Missing Authentication for Critical FunctionN/AN/A0%Oct 21, 2026
CVE-2026-59229: Undefined Security WeaknessN/AN/A0%Oct 21, 2026
CVE-2026-58064: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 21, 2026
CVE-2026-56388: Out-of-bounds WriteN/AN/A0%Oct 21, 2026
CVE-2026-56387: Memory Allocation with Excessive Size ValueN/AN/A0%Oct 21, 2026
CVE-2026-56386: Integer Underflow (Wrap or Wraparound)7.5 HighN/A1%Oct 21, 2026
CVE-2026-54427: Uncontrolled RecursionN/AN/A0%Oct 21, 2026
CVE-2026-54426: Uncontrolled RecursionN/AN/A0%Oct 21, 2026
CVE-2026-54425: Uncontrolled RecursionN/AN/A0%Oct 21, 2026
CVE-2026-48830: Improper AuthenticationN/AN/A0%Oct 21, 2026
CVE-2026-114242: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 21, 2026
CVE-2026-87096: Incorrect Authorization3.3 LowN/A0%Oct 21, 2026
CVE-2026-87095: Incorrect Authorization9.1 CriticalN/A0%Oct 21, 2026
CVE-2026-58663: Undefined Security WeaknessN/AN/A0%Oct 21, 2026
CVE-2026-41114: Uncontrolled Resource ConsumptionN/AN/A0%Oct 21, 2026
CVE-2026-110884: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 21, 2026
CVE-2026-110370: Deserialization of Untrusted Data8.8 HighN/A0%Oct 21, 2026
CVE-2026-110369: Deserialization of Untrusted Data8.8 HighN/A0%Oct 21, 2026
CVE-2026-105923: NULL Pointer DereferenceN/A4.0 Medium0%Oct 21, 2026
CVE-2026-97206: Use After Free7.5 HighN/A0%Oct 21, 2026
CVE-2026-96405: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 21, 2026
CVE-2026-85683: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 21, 2026
3826-3850 of 416436