The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-103522: Unrestricted Upload of File with Dangerous Type7.2 HighN/A0%Oct 12, 2026
CVE-2026-103521: Unrestricted Upload of File with Dangerous Type7.2 HighN/A0%Oct 12, 2026
CVE-2026-68764: Undefined Security WeaknessN/AN/AN/AOct 12, 2026
CVE-2026-18390: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 12, 2026
CVE-2026-12613: Deserialization of Untrusted Data8.8 HighN/A0%Oct 12, 2026
CVE-2026-109229: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109228: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109227: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109226: Improper Handling of Highly Compressed Data (Data Amplification)7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109225: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109206: Observable Response Discrepancy5.3 Medium6.9 Medium0%Oct 12, 2026
CVE-2026-109205: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Oct 12, 2026
CVE-2026-109204: Weak Password Recovery Mechanism for Forgotten Password6.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109203: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109202: Missing Authorization6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109201: Missing Authorization8.3 High8.7 High0%Oct 12, 2026
CVE-2026-109200: Server-Side Request Forgery (SSRF)6.4 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-109199: Improper Control of Generation of Code8.8 High8.7 High0%Oct 12, 2026
CVE-2026-109170: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-109169: Improper Neutralization of Special Elements used in an SQL Command6.5 Medium7.1 High0%Oct 12, 2026
CVE-2026-108894: Improper Neutralization of Special Elements used in an OS Command9.9 Critical8.6 High2%Oct 12, 2026
CVE-2026-108893: Stack-based Buffer Overflow9.9 Critical8.6 High1%Oct 12, 2026
CVE-2026-108892: Stack-based Buffer Overflow10.0 Critical9.3 Critical1%Oct 12, 2026
CVE-2026-108890: Improper Authorization6.3 Medium2.1 Low0%Oct 12, 2026
CVE-2026-103502: Improper Certificate ValidationN/A5.9 Medium0%Oct 12, 2026
4676-4700 of 412906
‹›