The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-42631: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-42630: Insertion of Sensitive Information Into Sent Data7.5 HighN/A0%Oct 10, 2026
CVE-2026-42419: Insertion of Sensitive Information Into Sent Data5.9 MediumN/A0%Oct 10, 2026
CVE-2026-40808: Missing Authorization6.5 MediumN/A0%Oct 10, 2026
CVE-2026-40805: Improper Limitation of a Pathname to a Restricted Directory7.7 HighN/A0%Oct 10, 2026
CVE-2026-40803: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-40802: Missing Authorization7.6 HighN/A0%Oct 10, 2026
CVE-2026-40801: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-40800: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 10, 2026
CVE-2026-40777: Missing Authorization8.1 HighN/A0%Oct 10, 2026
CVE-2026-39802: Improper Control of Generation of Code8.1 HighN/A0%Oct 10, 2026
CVE-2026-39801: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-39800: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-39799: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-27350: Server-Side Request Forgery (SSRF)7.2 HighN/A0%Oct 10, 2026
CVE-2026-108604: Incorrect Authorization6.3 Medium5.8 Medium0%Oct 10, 2026
CVE-2026-108603: Improper Limitation of a Pathname to a Restricted Directory3.3 Low4.8 Medium0%Oct 10, 2026
CVE-2026-108602: Server-Side Request Forgery (SSRF)4.3 Medium5.3 Medium0%Oct 10, 2026
CVE-2026-107434: Improper Validation of Specified Quantity in Input5.4 MediumN/A0%Oct 10, 2026
CVE-2026-107420: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 10, 2026
CVE-2026-103685: Missing Authorization4.3 MediumN/A0%Oct 10, 2026
CVE-2026-96341: Incorrect Privilege Assignment8.2 HighN/A0%Oct 10, 2026
CVE-2026-94590: Improper Verification of Source of a Communication Channel6.5 MediumN/A0%Oct 10, 2026
CVE-2026-57806: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-108600: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Oct 10, 2026
5901-5925 of 406803
‹›