The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108599: Improper Link Resolution Before File Access4.7 Medium5.7 Medium0%Oct 10, 2026
CVE-2026-108598: Improper Control of Generation of Code9.8 Critical9.3 Critical1%Oct 10, 2026
CVE-2026-108597: Improper Limitation of a Pathname to a Restricted Directory4.8 Medium5.9 Medium0%Oct 10, 2026
CVE-2026-108596: Authorization Bypass Through User-Controlled Key5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108595: Incorrect Authorization5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108594: Server-Side Request Forgery (SSRF)3.5 Low2.3 Low0%Oct 10, 2026
CVE-2026-108593: Improper Control of Generation of Code6.4 Medium7.3 High0%Oct 10, 2026
CVE-2026-108592: Cleartext Storage of Sensitive Information in an Environment Variable5.3 Medium6.0 Medium0%Oct 10, 2026
CVE-2026-108591: External Control of File Name or Path4.4 Medium5.9 Medium0%Oct 10, 2026
CVE-2026-106610: Incorrect Privilege Assignment9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-105892: Improper Limitation of a Pathname to a Restricted Directory9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-94160: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 10, 2026
CVE-2026-62044: Deserialization of Untrusted Data7.2 HighN/A0%Oct 10, 2026
CVE-2026-108586: Incorrect Authorization5.4 Medium5.3 Medium0%Oct 10, 2026
CVE-2026-108585: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium5.3 Medium0%Oct 10, 2026
CVE-2026-106609: Missing Authorization7.5 HighN/A0%Oct 10, 2026
CVE-2026-106608: Incorrect Privilege Assignment7.2 HighN/A0%Oct 10, 2026
CVE-2026-105889: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 10, 2026
CVE-2026-104398: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 10, 2026
CVE-2026-103357: Missing AuthorizationN/A6.9 Medium0%Oct 10, 2026
CVE-2026-103071: Improper Control of Generation of Code7.5 HighN/A0%Oct 10, 2026
CVE-2026-108583: Server-Side Request Forgery (SSRF)4.2 Medium2.3 Low0%Oct 10, 2026
CVE-2026-108582: Incorrect Permission Assignment for Critical Resource5.5 Medium6.8 Medium0%Oct 10, 2026
CVE-2026-108581: Missing Authorization6.5 Medium7.1 High0%Oct 10, 2026
CVE-2026-108580: Improper Restriction of Excessive Authentication Attempts6.5 Medium6.9 Medium0%Oct 10, 2026
5926-5950 of 406803
‹›