The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-95728: Undefined Security Weakness7.1 HighN/A0%Nov 3, 2026
CVE-2026-95727: Improper Neutralization of Special Elements used in a Command7.2 HighN/A1%Nov 3, 2026
CVE-2026-95726: Undefined Security Weakness7.5 HighN/A0%Nov 3, 2026
CVE-2026-95725: Undefined Security Weakness7.8 HighN/A1%Nov 3, 2026
CVE-2026-95724: Undefined Security Weakness8.1 HighN/A0%Nov 3, 2026
CVE-2026-95723: Undefined Security Weakness8.4 HighN/A0%Nov 3, 2026
CVE-2026-95722: Undefined Security Weakness8.8 HighN/A0%Nov 3, 2026
CVE-2026-93325: Protection Mechanism FailureN/A7.3 High0%Nov 3, 2026
CVE-2026-88968: Improper Link Resolution Before File AccessN/A7.7 High0%Nov 3, 2026
CVE-2026-88066: Uncontrolled Search Path ElementN/A7.5 High0%Nov 3, 2026
CVE-2026-63502: Improper Limitation of a Pathname to a Restricted Directory8.3 HighN/A0%Nov 3, 2026
CVE-2026-63501: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Nov 3, 2026
CVE-2026-63500: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Nov 3, 2026
CVE-2026-63489: Improper Neutralization of Special Elements in Data Query Logic7.6 HighN/A0%Nov 3, 2026
CVE-2026-63482: Missing Authentication for Critical Function7.5 HighN/A0%Nov 3, 2026
CVE-2026-63478: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Nov 3, 2026
CVE-2026-63476: Uncontrolled Resource Consumption4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63475: Uncontrolled Recursion4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63471: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63470: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63469: Improper Control of Generation of CodeN/A9.3 Critical0%Nov 3, 2026
CVE-2026-63434: Improper Input Validation4.3 MediumN/A0%Nov 3, 2026
CVE-2026-63433: Cross-Site Request Forgery (CSRF)6.8 MediumN/A0%Nov 3, 2026
CVE-2026-63395: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A1%Nov 3, 2026
CVE-2026-54161: Improper Neutralization of Special Elements used in an OS Command8.1 HighN/A1%Nov 3, 2026
651-675 of 418286