The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-97339: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-93953: Improper Neutralization of Special Elements used in an SQL Command8.0 HighN/A0%Oct 16, 2026
CVE-2026-93535: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 16, 2026
CVE-2026-89280: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 16, 2026
CVE-2026-77829: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 16, 2026
CVE-2026-111451: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 16, 2026
CVE-2026-111450: Use of Less Trusted Source5.9 MediumN/A0%Oct 16, 2026
CVE-2026-111449: Concurrent Execution using Shared Resource with Improper Synchronization5.9 MediumN/A0%Oct 16, 2026
CVE-2026-111448: Improper Handling of Case Sensitivity3.7 LowN/A0%Oct 16, 2026
CVE-2026-111447: External Control of Assumed-Immutable Web Parameter8.1 HighN/A0%Oct 16, 2026
CVE-2026-111446: Incorrect Authorization8.6 HighN/A0%Oct 16, 2026
CVE-2026-111445: Incorrect Resource Transfer Between Spheres8.1 HighN/A0%Oct 16, 2026
CVE-2026-111444: Improper Neutralization of Special Elements used in an SQL Command9.8 CriticalN/A0%Oct 16, 2026
CVE-2026-111443: Use of Less Trusted Source6.5 MediumN/A0%Oct 16, 2026
CVE-2026-111442: Improper Neutralization of Input During Web Page GenerationN/A5.3 Medium0%Oct 16, 2026
CVE-2026-109990: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-109207: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-107758: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 16, 2026
CVE-2026-104769: Improper Limitation of a Pathname to a Restricted Directory5.9 MediumN/A1%Oct 16, 2026
CVE-2026-104745: Improper Privilege Management8.1 HighN/A1%Oct 16, 2026
CVE-2026-103518: Improper Neutralization of Special Elements used in an SQL Command4.9 MediumN/A0%Oct 16, 2026
CVE-2026-111389: Improper Neutralization of Special Elements used in an SQL Command7.7 High8.3 High0%Oct 16, 2026
CVE-2026-111388: Improper Access Control5.4 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111387: Improper Removal of Sensitive Information Before Storage or Transfer6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111386: Observable Response Discrepancy4.3 Medium5.3 Medium0%Oct 16, 2026
5151-5175 of 530113
‹›