The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-111386: Observable Response Discrepancy4.3 Medium5.3 Medium0%Oct 16, 2026
CVE-2026-111385: URL Redirection to Untrusted Site4.8 Medium6.3 Medium0%Oct 16, 2026
CVE-2026-111383: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111382: Out-of-bounds Write8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111381: Heap-based Buffer Overflow7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111380: Integer Overflow or Wraparound8.8 High8.7 High0%Oct 16, 2026
CVE-2026-111379: Heap-based Buffer Overflow7.3 High7.0 High0%Oct 16, 2026
CVE-2026-111378: Uncontrolled Resource Consumption7.5 High8.7 High0%Oct 16, 2026
CVE-2026-111377: Uncontrolled Resource Consumption6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-111376: Out-of-bounds Read5.0 Medium2.3 Low0%Oct 16, 2026
CVE-2026-111375: Out-of-bounds Read9.1 Critical6.3 Medium0%Oct 16, 2026
CVE-2026-111374: Improper Input Validation5.3 Medium6.0 Medium0%Oct 16, 2026
CVE-2026-111373: NULL Pointer Dereference7.5 High6.9 Medium0%Oct 16, 2026
CVE-2026-111237: Improper Neutralization of Directives in Dynamically Evaluated Code5.3 Medium4.8 Medium0%Oct 16, 2026
CVE-2026-111212: Improper Neutralization of Directives in Dynamically Evaluated Code4.8 Medium0.9 Low0%Oct 16, 2026
CVE-2026-109813: Use of Hard-coded Cryptographic KeyN/A8.6 High0%Oct 16, 2026
CVE-2026-109812: Missing AuthorizationN/A6.9 Medium0%Oct 16, 2026
CVE-2026-105228: Out-of-bounds ReadN/A7.0 High0%Oct 16, 2026
CVE-2026-105227: Out-of-bounds ReadN/A7.0 High0%Oct 16, 2026
CVE-2026-100159: Improper Control of Generation of Code4.8 MediumN/A0%Oct 16, 2026
CVE-2026-111384: Allocation of Resources Without Limits or Throttling6.5 Medium7.1 High0%Oct 16, 2026
CVE-2026-92777: Use of Default Cryptographic Key6.4 Medium5.4 Medium0%Oct 16, 2026
CVE-2026-92629: Missing Authorization7.3 High7.0 High0%Oct 16, 2026
CVE-2026-89062: Out-of-bounds Write5.5 Medium6.8 Medium0%Oct 16, 2026
CVE-2026-89057: Authentication Bypass Using an Alternate Path or Channel6.8 Medium7.0 High0%Oct 16, 2026
5176-5200 of 530113
‹›