The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-110889: Generation of Error Message Containing Sensitive Information7.5 HighN/A0%Oct 17, 2026
CVE-2026-111110: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-110253: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Oct 17, 2026
CVE-2026-109983: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 17, 2026
CVE-2026-100316: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-110384: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 17, 2026
CVE-2026-97314: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 17, 2026
CVE-2026-92433: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Oct 17, 2026
CVE-2026-92432: URL Redirection to Untrusted Site4.3 MediumN/A0%Oct 17, 2026
CVE-2026-92431: Missing Authorization3.7 LowN/A0%Oct 17, 2026
CVE-2026-91074: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Oct 17, 2026
CVE-2026-81344: Deserialization of Untrusted Data6.6 MediumN/A0%Oct 17, 2026
CVE-2026-81343: Missing Authorization5.3 MediumN/A0%Oct 17, 2026
CVE-2026-110527: Improper Access Control5.3 MediumN/A0%Oct 17, 2026
CVE-2026-106470: Server-Side Request Forgery (SSRF)5.0 MediumN/A0%Oct 17, 2026
CVE-2026-104246: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Oct 17, 2026
CVE-2026-104122: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Oct 17, 2026
CVE-2026-103376: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 17, 2026
CVE-2026-96660: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-92978: Cross-Site Request Forgery (CSRF)4.3 MediumN/A0%Oct 17, 2026
CVE-2026-92798: Improper Control of Generation of Code8.1 HighN/A0%Oct 17, 2026
CVE-2026-92715: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 17, 2026
CVE-2026-111726: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 17, 2026
CVE-2026-110268: Improper Limitation of a Pathname to a Restricted Directory4.9 MediumN/A1%Oct 17, 2026
CVE-2026-109989: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 17, 2026
3876-3900 of 414140
‹›