The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-85897: Heap-based Buffer Overflow8.8 HighN/A1%Oct 29, 2026
CVE-2026-85890: Double Free8.8 HighN/A1%Oct 29, 2026
CVE-2026-85330: Incorrect Authorization4.3 MediumN/A0%Oct 29, 2026
CVE-2026-20942: Improper Restriction of Rendered UI Layers or Frames4.3 MediumN/A1%Oct 29, 2026
CVE-2026-114148: Incorrect Default Permissions7.8 HighN/A0%Oct 29, 2026
CVE-2026-118641: Improper Neutralization of Special Elements in Data Query Logic7.5 High6.9 Medium0%Oct 28, 2026
CVE-2026-62765: Access of Resource Using Incompatible Type8.1 HighN/A0%Oct 27, 2026
CVE-2026-85898: Access of Resource Using Incompatible Type8.8 HighN/A1%Oct 27, 2026
CVE-2026-83831: Double Free8.8 HighN/A1%Oct 27, 2026
CVE-2026-106078: Improper Verification of Cryptographic SignatureN/A6.9 Medium0%Oct 27, 2026
CVE-2026-106077: Incorrect AuthorizationN/A8.3 High0%Oct 27, 2026
CVE-2026-106076: Improper Neutralization of Special Elements used in an SQL CommandN/A9.0 Critical0%Oct 27, 2026
CVE-2025-64394: Insecure Operation on Windows Junction / Mount PointN/A4.3 Medium0%Oct 27, 2026
CVE-2026-112250: Insertion of Sensitive Information into Log File4.4 MediumN/A0%Oct 26, 2026
CVE-2026-97785: Improper Authentication10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-96185: Stack-based Buffer Overflow7.5 HighN/A1%Oct 22, 2026
CVE-2026-83938: Missing Authentication for Critical Function10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-110063: Improper Link Resolution Before File Access10.0 CriticalN/A1%Oct 22, 2026
CVE-2026-108456: Server-Side Request Forgery (SSRF)7.7 HighN/A1%Oct 22, 2026
CVE-2026-105014: Improper Neutralization of Special Elements used in a Command9.1 CriticalN/A1%Oct 22, 2026
CVE-2026-114119: Use of Hard-coded Credentials9.8 Critical9.3 Critical0%Oct 21, 2026
CVE-2026-111895: Improper Authentication6.8 Medium7.6 High0%Oct 17, 2026
CVE-2026-80092: Authentication Bypass by Assumed-Immutable Data5.3 MediumN/A1%Oct 16, 2026
CVE-2026-109461: Origin Validation Error5.9 MediumN/A0%Oct 16, 2026
CVE-2026-109468: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 15, 2026
26-50 of 16881
‹›