The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-75158: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A1%Sep 21, 2026
CVE-2026-91867: Uncontrolled Resource Consumption4.3 MediumN/A0%Sep 21, 2026
CVE-2026-91866: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 21, 2026
CVE-2026-91865: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 21, 2026
CVE-2026-91864: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 21, 2026
CVE-2026-91863: Uncontrolled Recursion7.5 HighN/A1%Sep 21, 2026
CVE-2026-47321: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Sep 21, 2026
CVE-2026-84750: Unrestricted Upload of File with Dangerous Type6.5 MediumN/A0%Sep 19, 2026
CVE-2026-93574: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A1%Sep 18, 2026
CVE-2026-93562: Undefined Security Weakness6.5 MediumN/A0%Sep 18, 2026
CVE-2026-93432: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A1%Sep 18, 2026
CVE-2026-93579: Undefined Security Weakness6.5 MediumN/A1%Sep 18, 2026
CVE-2026-93576: Improper Neutralization of CRLF Sequences7.5 HighN/A0%Sep 18, 2026
CVE-2026-93573: Inconsistent Interpretation of HTTP Requests6.5 MediumN/A1%Sep 18, 2026
CVE-2026-93566: Undefined Security Weakness6.5 MediumN/A0%Sep 18, 2026
CVE-2026-93565: Undefined Security Weakness7.5 HighN/A1%Sep 18, 2026
CVE-2026-93564: Undefined Security Weakness7.5 HighN/A1%Sep 18, 2026
CVE-2026-93558: Undefined Security Weakness7.5 HighN/A1%Sep 18, 2026
CVE-2026-10832: Allocation of Resources Without Limits or Throttling5.9 MediumN/A0%Sep 18, 2026
CVE-2026-93568: Improper Input Validation7.5 HighN/A1%Sep 18, 2026
CVE-2026-93569: Inconsistent Interpretation of HTTP Requests8.2 HighN/A2%Sep 18, 2026
CVE-2026-93567: Improper Input Validation7.5 HighN/A3%Sep 18, 2026
CVE-2026-93560: Undefined Security Weakness7.5 HighN/A0%Sep 18, 2026
CVE-2026-93492: Undefined Security Weakness5.3 MediumN/A0%Sep 18, 2026
CVE-2026-93491: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Sep 18, 2026
401-425 of 4429