The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-97057: Improper Validation of Specified Quantity in Input7.5 High8.7 High0%Sep 24, 2026
CVE-2026-95521: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A1%Sep 24, 2026
CVE-2026-95519: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Sep 24, 2026
CVE-2026-91187: Improper Verification of Cryptographic SignatureN/A9.3 Critical0%Sep 24, 2026
CVE-2026-88360: Undefined Security WeaknessN/AN/A0%Sep 24, 2026
CVE-2026-88359: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 24, 2026
CVE-2026-77798: Deadlock6.5 MediumN/A0%Sep 24, 2026
CVE-2026-77797: Improper Input Validation3.6 LowN/A0%Sep 24, 2026
CVE-2026-18857: Out-of-bounds Read3.4 LowN/A0%Sep 24, 2026
CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm3.3 LowN/A0%Sep 24, 2026
CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer3.4 LowN/A0%Sep 24, 2026
CVE-2026-17504: Integer Underflow (Wrap or Wraparound)4.4 MediumN/A0%Sep 24, 2026
CVE-2026-17503: Improper Input Validation5.1 MediumN/A0%Sep 24, 2026
CVE-2026-17413: Improper Validation of Array Index5.1 MediumN/A0%Sep 24, 2026
CVE-2026-97182: Improper Neutralization7.3 High5.5 Medium0%Sep 24, 2026
CVE-2026-96515: Missing AuthorizationN/A8.6 High0%Sep 24, 2026
CVE-2026-94416: Authentication Bypass by Spoofing6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88916: Incorrect Authorization6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88907: Incorrect Authorization7.4 HighN/A0%Sep 24, 2026
CVE-2026-19072: Product Released in Non-Release Configuration9.9 CriticalN/A0%Sep 24, 2026
CVE-2026-97311: Missing Authorization4.3 MediumN/A0%Sep 24, 2026
CVE-2026-7169: Undefined Security WeaknessN/A7.5 High0%Sep 24, 2026
CVE-2026-4806: Missing Authorization6.5 MediumN/A0%Sep 24, 2026
CVE-2026-3253: Missing Authorization4.3 MediumN/A0%Sep 24, 2026
CVE-2026-19532: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Sep 24, 2026
4101-4125 of 402167