The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107193: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 12, 2026
CVE-2025-15703: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Oct 12, 2026
CVE-2026-87690: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Oct 12, 2026
CVE-2026-21139: Undefined Security WeaknessN/A7.3 High0%Oct 12, 2026
CVE-2026-21138: Undefined Security WeaknessN/A6.9 Medium0%Oct 12, 2026
CVE-2026-21137: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.1 Medium0%Oct 12, 2026
CVE-2026-21136: Undefined Security WeaknessN/A6.8 Medium0%Oct 12, 2026
CVE-2026-21135: Undefined Security WeaknessN/A5.9 Medium0%Oct 12, 2026
CVE-2026-21134: Undefined Security WeaknessN/A6.1 Medium0%Oct 12, 2026
CVE-2026-21133: Undefined Security WeaknessN/A5.1 Medium0%Oct 12, 2026
CVE-2026-21132: Undefined Security WeaknessN/A6.0 Medium1%Oct 12, 2026
CVE-2026-21131: Incorrect Default PermissionsN/A2.1 Low0%Oct 12, 2026
CVE-2026-21130: Improper Input ValidationN/A5.1 Medium0%Oct 12, 2026
CVE-2026-21129: Improper Input ValidationN/A5.1 Medium0%Oct 12, 2026
CVE-2026-21128: Improper Input ValidationN/A5.1 Medium0%Oct 12, 2026
CVE-2026-21127: Undefined Security WeaknessN/A6.9 Medium0%Oct 12, 2026
CVE-2026-21126: Undefined Security WeaknessN/A6.9 Medium0%Oct 12, 2026
CVE-2026-21125: Improper Input ValidationN/A8.6 High0%Oct 12, 2026
CVE-2026-21124: Improper Input ValidationN/A8.6 High0%Oct 12, 2026
CVE-2026-21123: Undefined Security WeaknessN/A6.7 Medium0%Oct 12, 2026
CVE-2026-21122: Out-of-bounds WriteN/A7.0 High0%Oct 12, 2026
CVE-2026-21121: Undefined Security WeaknessN/A6.9 Medium0%Oct 12, 2026
CVE-2026-21120: Use After FreeN/A8.9 High0%Oct 12, 2026
CVE-2026-21119: Undefined Security WeaknessN/A4.8 Medium0%Oct 12, 2026
CVE-2026-21118: Undefined Security WeaknessN/A6.9 Medium0%Oct 12, 2026
4826-4850 of 412906