The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-107836: Out-of-bounds ReadN/A7.1 High0%Oct 9, 2026
CVE-2026-107835: Interpretation Conflict4.0 MediumN/A0%Oct 9, 2026
CVE-2026-107834: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 9, 2026
CVE-2026-107833: Uncontrolled Recursion5.9 MediumN/A0%Oct 9, 2026
CVE-2026-107826: Uncontrolled Recursion7.5 HighN/A0%Oct 9, 2026
CVE-2026-107825: Improper Input Validation4.0 MediumN/A0%Oct 9, 2026
CVE-2026-107824: Missing Authentication for Critical FunctionN/A9.3 Critical0%Oct 9, 2026
CVE-2026-107823: Improper Encoding or Escaping of Output7.2 HighN/A1%Oct 9, 2026
CVE-2026-107822: Use of Incorrectly-Resolved Name or Reference6.4 MediumN/A0%Oct 9, 2026
CVE-2026-107821: Improper Validation of Specified Index, Position, or Offset in Input8.0 HighN/A1%Oct 9, 2026
CVE-2026-107820: Integer Overflow or Wraparound5.3 MediumN/A0%Oct 9, 2026
CVE-2026-107819: Improper Validation of Certificate with Host Mismatch5.9 MediumN/A0%Oct 9, 2026
CVE-2026-107818: External Control of System or Configuration Setting8.4 HighN/A0%Oct 9, 2026
CVE-2026-107817: Out-of-bounds Read4.4 MediumN/A0%Oct 9, 2026
CVE-2026-107816: Out-of-bounds Read6.4 MediumN/A0%Oct 9, 2026
CVE-2026-75597: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 9, 2026
CVE-2026-75347: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-55797: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Oct 9, 2026
CVE-2026-48484: Improper Input Validation6.5 MediumN/A0%Oct 9, 2026
CVE-2026-42695: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 9, 2026
CVE-2026-108160: Download of Code Without Integrity Check7.5 High7.7 High0%Oct 9, 2026
CVE-2026-108159: Improper Neutralization of Input During Web Page Generation7.5 High7.7 High0%Oct 9, 2026
CVE-2026-108158: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Oct 9, 2026
CVE-2026-108157: Improper Authentication8.1 High9.2 Critical1%Oct 9, 2026
CVE-2026-108156: External Control of File Name or Path7.1 High6.9 Medium0%Oct 9, 2026
6801-6825 of 406516
‹›