The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109302: Incorrect Authorization3.7 Low6.3 Medium0%Oct 12, 2026
CVE-2026-109301: Uncaught Exception5.9 Medium8.2 High0%Oct 12, 2026
CVE-2026-109300: Improper Neutralization of Input During Web Page Generation4.6 Medium5.1 Medium0%Oct 12, 2026
CVE-2026-109299: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109298: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109297: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109296: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109295: Inefficient Regular Expression Complexity6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109294: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109293: Exposure of Sensitive Information to an Unauthorized Actor6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109292: Exposure of Sensitive Information to an Unauthorized Actor6.8 Medium7.6 High0%Oct 12, 2026
CVE-2026-109291: Improper Neutralization of Input During Web Page Generation7.3 High8.5 High0%Oct 12, 2026
CVE-2026-109290: Improper Neutralization of Input During Web Page Generation7.3 High8.4 High0%Oct 12, 2026
CVE-2026-109289: Insufficient Session Expiration6.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109288: Improper Neutralization of Input During Web Page Generation6.4 Medium7.2 High0%Oct 12, 2026
CVE-2026-109287: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109286: Origin Validation Error8.1 High8.6 High0%Oct 12, 2026
CVE-2026-109285: Incorrect Authorization5.0 Medium2.3 Low0%Oct 12, 2026
CVE-2026-109284: Missing Authorization4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109283: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109282: Access of Resource Using Incompatible Type2.5 Low2.0 Low0%Oct 12, 2026
CVE-2026-109281: Out-of-bounds Read4.4 Medium4.8 Medium0%Oct 12, 2026
CVE-2026-109280: NULL Pointer Dereference2.5 Low2.0 Low0%Oct 12, 2026
CVE-2026-109279: Concurrent Execution using Shared Resource with Improper Synchronization2.5 Low2.0 Low0%Oct 12, 2026
CVE-2026-109278: Missing Release of Memory after Effective Lifetime3.7 Low6.3 Medium0%Oct 12, 2026
4526-4550 of 412906
‹›