The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-111313: Server-Side Request Forgery (SSRF)6.5 Medium7.1 High0%Oct 15, 2026
CVE-2026-111312: Missing Authentication for Critical Function7.7 High9.2 Critical1%Oct 15, 2026
CVE-2026-111284: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-111283: Authentication Bypass by Primary Weakness9.0 Critical9.5 Critical1%Oct 15, 2026
CVE-2026-111282: Integer Overflow or Wraparound8.2 High8.8 High1%Oct 15, 2026
CVE-2026-111281: Use of Hard-coded Credentials9.8 Critical9.3 Critical1%Oct 15, 2026
CVE-2026-111280: Out-of-bounds Write7.4 High8.3 High1%Oct 15, 2026
CVE-2026-111279: Memory Allocation with Excessive Size Value7.5 High8.7 High1%Oct 15, 2026
CVE-2026-111278: Guessable CAPTCHA5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111277: Missing Authorization7.5 High8.7 High0%Oct 15, 2026
CVE-2026-111275: Out-of-bounds Write6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111274: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111273: Off-by-one Error6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111272: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111271: Out-of-bounds Read5.5 Medium6.8 Medium0%Oct 15, 2026
CVE-2026-111270: Out-of-bounds Write6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-111269: Out-of-bounds Read6.1 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-110922: Use After Free8.8 HighN/A0%Oct 15, 2026
CVE-2026-110921: Use After Free8.8 HighN/A0%Oct 15, 2026
CVE-2026-110920: Improper Restriction of Operations within the Bounds of a Memory Buffer8.8 HighN/A0%Oct 15, 2026
CVE-2026-110919: Use After Free8.8 HighN/A0%Oct 15, 2026
CVE-2026-110918: Improper Restriction of Operations within the Bounds of a Memory Buffer4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110917: Improper Restriction of Operations within the Bounds of a Memory Buffer4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110916: Improper Input Validation9.6 CriticalN/A0%Oct 15, 2026
CVE-2026-110915: Use After Free8.8 HighN/A0%Oct 15, 2026
5501-5525 of 546512