The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111880: Out-of-bounds Write7.4 High8.3 High0%Oct 17, 2026
CVE-2026-110882: Missing Authorization4.3 MediumN/A0%Oct 17, 2026
CVE-2025-71435: Insufficient Session Expiration4.2 Medium2.3 Low0%Oct 17, 2026
CVE-2024-58398: coder: Coder 2.3.1 before 2.14.4, 2.15.x before 2.15.3, and 2.16.0 before 2.16.1 contains an open redirect vulnerability in…4.3 Medium5.3 Medium0%Oct 17, 2026
CVE-2026-111911: Improper Authentication9.8 Critical9.3 Critical0%Oct 17, 2026
CVE-2026-111906: Cross-Site Request Forgery (CSRF)6.5 Medium7.1 High0%Oct 17, 2026
CVE-2026-111901: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 17, 2026
CVE-2026-109701: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 17, 2026
CVE-2026-110889: Generation of Error Message Containing Sensitive Information7.5 HighN/A0%Oct 17, 2026
CVE-2026-111110: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-110253: Improper Limitation of a Pathname to a Restricted Directory5.4 MediumN/A0%Oct 17, 2026
CVE-2026-109983: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 17, 2026
CVE-2026-100316: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 17, 2026
CVE-2026-110384: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 17, 2026
CVE-2026-97314: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 17, 2026
CVE-2026-92433: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Oct 17, 2026
CVE-2026-92432: URL Redirection to Untrusted Site4.3 MediumN/A0%Oct 17, 2026
CVE-2026-92431: Missing Authorization3.7 LowN/A0%Oct 17, 2026
CVE-2026-91074: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Oct 17, 2026
CVE-2026-81344: Deserialization of Untrusted Data6.6 MediumN/A0%Oct 17, 2026
CVE-2026-81343: Missing Authorization5.3 MediumN/A0%Oct 17, 2026
CVE-2026-110527: Improper Access Control5.3 MediumN/A0%Oct 17, 2026
CVE-2026-106470: Server-Side Request Forgery (SSRF)5.0 MediumN/A0%Oct 17, 2026
CVE-2026-104246: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A0%Oct 17, 2026
CVE-2026-104122: Improper Neutralization of Special Elements used in an SQL Command6.8 MediumN/A0%Oct 17, 2026
3926-3950 of 414363
‹›