The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-15178: Missing Authorization5.4 MediumN/A0%Oct 10, 2026
CVE-2026-12626: Deserialization of Untrusted Data7.2 HighN/A0%Oct 10, 2026
CVE-2026-108503: Incorrect Default Permissions3.3 LowN/A0%Oct 10, 2026
CVE-2026-108502: Improper Privilege Management3.3 LowN/A0%Oct 10, 2026
CVE-2026-107742: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-107712: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 10, 2026
CVE-2026-104801: Improper Limitation of a Pathname to a Restricted Directory9.1 CriticalN/A1%Oct 10, 2026
CVE-2026-104006: Use of Cache Containing Sensitive Information3.7 LowN/A0%Oct 10, 2026
CVE-2026-103897: Improper Neutralization of Input During Web Page Generation4.4 MediumN/A0%Oct 10, 2026
CVE-2026-103427: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-102402: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-100196: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-100161: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-97643: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-96682: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-96667: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-94421: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-94375: Files or Directories Accessible to External Parties5.3 MediumN/A0%Oct 10, 2026
CVE-2026-94257: Improper Privilege Management8.1 HighN/A0%Oct 10, 2026
CVE-2026-94256: Improper Authentication8.1 HighN/A0%Oct 10, 2026
CVE-2026-93775: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 10, 2026
CVE-2026-92975: Improper Privilege Management8.1 HighN/A0%Oct 10, 2026
CVE-2026-91862: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 10, 2026
CVE-2026-91050: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 10, 2026
CVE-2026-87781: Improper Neutralization of Special Elements used in an SQL Command8.6 HighN/A0%Oct 10, 2026
5526-5550 of 406803
‹›