The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111400: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 16, 2026
CVE-2026-111399: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 16, 2026
CVE-2026-111397: Missing Authorization5.3 MediumN/A0%Oct 16, 2026
CVE-2026-111396: Missing Authorization7.1 HighN/A0%Oct 16, 2026
CVE-2026-110903: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 16, 2026
CVE-2026-110901: Authorization Bypass Through User-Controlled Key5.4 MediumN/A0%Oct 16, 2026
CVE-2026-110900: Missing Authorization5.3 MediumN/A0%Oct 16, 2026
CVE-2026-110896: Missing Authorization5.3 MediumN/A0%Oct 16, 2026
CVE-2026-110380: Missing Authorization5.3 MediumN/A0%Oct 16, 2026
CVE-2026-107564: Allocation of Resources Without Limits or Throttling7.5 High8.7 High0%Oct 16, 2026
CVE-2026-105958: Out-of-bounds Write7.5 HighN/A0%Oct 16, 2026
CVE-2026-111391: Improper Neutralization of Directives in Dynamically Evaluated Code8.1 High9.2 Critical0%Oct 16, 2026
CVE-2026-111390: SQL Injection: Hibernate5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-110029: Missing Authorization5.4 MediumN/A0%Oct 16, 2026
CVE-2026-109930: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 16, 2026
CVE-2026-107648: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-105959: Integer Overflow or Wraparound7.5 HighN/A0%Oct 16, 2026
CVE-2026-109119: Missing Authorization8.8 HighN/A0%Oct 16, 2026
CVE-2026-109118: Improper Limitation of a Pathname to a Restricted Directory4.6 MediumN/A0%Oct 16, 2026
CVE-2026-96768: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-14452: URL Redirection to Untrusted SiteN/A8.6 High0%Oct 16, 2026
CVE-2026-110703: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 16, 2026
CVE-2026-107649: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 16, 2026
CVE-2026-106030: Incorrect AuthorizationN/A6.8 Medium0%Oct 16, 2026
CVE-2026-93681: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 16, 2026
5001-5025 of 530113
‹›