The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-62046: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-62045: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-108504: Improper Privilege Management5.5 MediumN/A0%Oct 10, 2026
CVE-2026-106606: Deserialization of Untrusted Data7.2 HighN/A0%Oct 10, 2026
CVE-2026-104803: Improper Authentication9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-104759: Improper Authentication8.1 HighN/A1%Oct 10, 2026
CVE-2026-104728: Missing Authorization4.3 MediumN/A0%Oct 10, 2026
CVE-2026-103478: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-102774: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-102291: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.4 MediumN/A0%Oct 10, 2026
CVE-2026-101921: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 10, 2026
CVE-2026-101920: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-100178: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-100147: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-97348: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Oct 10, 2026
CVE-2026-96840: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-96574: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-96572: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-96558: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-95684: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-94538: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-89100: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 10, 2026
CVE-2026-6243: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-5725: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 10, 2026
CVE-2026-3717: Missing Authorization5.3 MediumN/A0%Oct 10, 2026
5501-5525 of 406803
‹›