The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-88360: Insufficient Precision or Accuracy of a Real Number7.5 HighN/A0%Sep 24, 2026
CVE-2026-88359: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Sep 24, 2026
CVE-2026-77798: Deadlock6.5 MediumN/A0%Sep 24, 2026
CVE-2026-77797: Improper Input Validation3.6 LowN/A0%Sep 24, 2026
CVE-2026-18857: Out-of-bounds Read3.4 LowN/A0%Sep 24, 2026
CVE-2026-18104: Use of a Broken or Risky Cryptographic Algorithm3.3 LowN/A0%Sep 24, 2026
CVE-2026-17511: Improper Removal of Sensitive Information Before Storage or Transfer3.4 LowN/A0%Sep 24, 2026
CVE-2026-17504: Integer Underflow (Wrap or Wraparound)4.4 MediumN/A0%Sep 24, 2026
CVE-2026-17503: Improper Input Validation5.1 MediumN/A0%Sep 24, 2026
CVE-2026-17413: Improper Validation of Array Index5.1 MediumN/A0%Sep 24, 2026
CVE-2026-97062: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Sep 24, 2026
CVE-2026-97182: Improper Neutralization7.3 High5.5 Medium0%Sep 24, 2026
CVE-2026-96515: Missing AuthorizationN/A8.6 High0%Sep 24, 2026
CVE-2026-94416: Authentication Bypass by Spoofing6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88916: Incorrect Authorization6.8 MediumN/A0%Sep 24, 2026
CVE-2026-88907: Incorrect Authorization7.4 HighN/A0%Sep 24, 2026
CVE-2026-19072: Product Released in Non-Release Configuration9.9 CriticalN/A0%Sep 24, 2026
CVE-2026-97311: Missing Authorization4.3 MediumN/A0%Sep 24, 2026
CVE-2026-7169: Undefined Security WeaknessN/A7.5 High0%Sep 24, 2026
CVE-2026-4806: Missing Authorization6.5 MediumN/A0%Sep 24, 2026
CVE-2026-3253: Missing Authorization4.3 MediumN/A0%Sep 24, 2026
CVE-2026-19532: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Sep 24, 2026
CVE-2026-16302: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Sep 24, 2026
CVE-2026-97179: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium2.1 Low0%Sep 24, 2026
CVE-2026-79680: Authentication Bypass Using an Alternate Path or ChannelN/A4.5 Medium0%Sep 24, 2026
6426-6450 of 725678