The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109322: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109321: Use of Weak Credentials9.1 Critical9.3 Critical0%Oct 12, 2026
CVE-2026-109320: Insufficient Session Expiration5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109319: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109318: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 High1%Oct 12, 2026
CVE-2026-109317: Improper Privilege Management7.2 High8.6 High0%Oct 12, 2026
CVE-2026-109316: Missing Authorization6.5 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109315: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109314: Exposure of Sensitive Information to an Unauthorized Actor7.3 High8.5 High0%Oct 12, 2026
CVE-2026-109313: Improper Authentication8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109312: Improper Authentication8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109311: Improper Input Validation6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109310: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109309: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109308: Improper Control of Generation of Code8.8 High8.7 High0%Oct 12, 2026
CVE-2026-109307: Improper Neutralization of Input During Web Page Generation4.7 Medium2.1 Low0%Oct 12, 2026
CVE-2026-109306: Missing Authorization5.9 Medium6.0 Medium0%Oct 12, 2026
CVE-2026-109305: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High0%Oct 12, 2026
CVE-2026-109304: Exposure of Sensitive Information to an Unauthorized Actor4.9 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109303: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109302: Incorrect Authorization3.7 Low6.3 Medium0%Oct 12, 2026
CVE-2026-109301: Uncaught Exception5.9 Medium8.2 High0%Oct 12, 2026
CVE-2026-109300: Improper Neutralization of Input During Web Page Generation4.6 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109299: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109298: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
4476-4500 of 412896
‹›