The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-85415: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 30, 2026
CVE-2026-103088: Path Traversal: '../filedir'7.5 HighN/A1%Sep 30, 2026
CVE-2026-71189: Improper Neutralization of Input During Web Page Generation3.5 Low4.8 Medium0%Sep 29, 2026
CVE-2026-102830: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Sep 29, 2026
CVE-2026-102829: Improper Neutralization of Special Elements used in an OS CommandN/A9.2 Critical0%Sep 29, 2026
CVE-2026-102828: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.2 Critical0%Sep 29, 2026
CVE-2026-102827: Improper Neutralization of Special Elements used in a Command9.8 CriticalN/A0%Sep 29, 2026
CVE-2026-102826: Improper Neutralization of Special Elements used in a Command8.1 HighN/A0%Sep 29, 2026
CVE-2026-102616: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 29, 2026
CVE-2026-102677: Improper Input Validation8.8 HighN/A0%Sep 29, 2026
CVE-2026-92231: Improper Neutralization of Input During Web Page Generation6.7 Medium7.1 High0%Sep 29, 2026
CVE-2026-102676: Improper Privilege Management9.8 CriticalN/A0%Sep 29, 2026
CVE-2026-102675: Origin Validation Error7.4 HighN/A0%Sep 29, 2026
CVE-2026-102674: Incorrect Privilege Assignment6.1 MediumN/A0%Sep 29, 2026
CVE-2026-102673: Origin Validation Error6.1 MediumN/A0%Sep 29, 2026
CVE-2026-101127: Improper Neutralization of Input During Web Page Generation9.4 Critical8.6 High0%Sep 29, 2026
CVE-2026-97711: Improper Neutralization of Input During Web Page GenerationN/A2.3 Low0%Sep 29, 2026
CVE-2026-102630: Use of Less Trusted Source4.7 Medium2.3 Low0%Sep 29, 2026
CVE-2026-102491: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Sep 29, 2026
CVE-2026-100825: Use After Free8.8 HighN/A0%Sep 29, 2026
CVE-2026-100817: Undefined Security Weakness5.4 MediumN/A0%Sep 29, 2026
CVE-2026-100814: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Sep 29, 2026
CVE-2026-100813: Release of Invalid Pointer or Reference8.8 HighN/A0%Sep 29, 2026
CVE-2026-100796: Use After Free8.8 HighN/A0%Sep 29, 2026
CVE-2026-100793: Access of Resource Using Incompatible Type6.5 MediumN/A0%Sep 29, 2026
401-425 of 16386
‹›