The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-39801: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-39800: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-39799: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-27350: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Oct 10, 2026
CVE-2026-108604: Incorrect Authorization6.3 Medium5.8 Medium0%Oct 10, 2026
CVE-2026-108603: Improper Limitation of a Pathname to a Restricted Directory3.3 Low4.8 Medium0%Oct 10, 2026
CVE-2026-108602: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Oct 10, 2026
CVE-2026-107434: Improper Validation of Specified Quantity in Input5.4 MediumN/A0%Oct 10, 2026
CVE-2026-107420: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 10, 2026
CVE-2026-103685: Missing Authorization4.3 MediumN/A0%Oct 10, 2026
CVE-2026-96341: Incorrect Privilege Assignment8.2 HighN/A0%Oct 10, 2026
CVE-2026-94590: Improper Verification of Source of a Communication Channel6.5 MediumN/A0%Oct 10, 2026
CVE-2026-57806: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-108600: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Oct 10, 2026
CVE-2026-108599: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Oct 10, 2026
CVE-2026-108598: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Oct 10, 2026
CVE-2026-108597: Improper Limitation of a Pathname to a Restricted Directory4.8 Medium5.9 Medium0%Oct 10, 2026
CVE-2026-108596: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108595: Incorrect Authorization5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108594: Server-Side Request Forgery (SSRF)3.5 Low2.3 Low0%Oct 10, 2026
CVE-2026-108593: Improper Control of Generation of Code6.4 Medium7.3 High0%Oct 10, 2026
CVE-2026-108592: Cleartext Storage of Sensitive Information in an Environment Variable5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108591: External Control of File Name or Path4.4 Medium5.9 Medium0%Oct 10, 2026
CVE-2026-106610: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-105892: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A0%Oct 10, 2026
5376-5400 of 406803
‹›