The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107818: External Control of System or Configuration Setting8.4 HighN/A0%Oct 9, 2026
CVE-2026-107817: Out-of-bounds Read4.4 MediumN/A0%Oct 9, 2026
CVE-2026-107816: Out-of-bounds Read6.4 MediumN/A0%Oct 9, 2026
CVE-2026-75597: Generation of Error Message Containing Sensitive Information5.3 MediumN/A0%Oct 9, 2026
CVE-2026-75347: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-55797: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A2%Oct 9, 2026
CVE-2026-48484: Improper Input Validation6.5 MediumN/A0%Oct 9, 2026
CVE-2026-42695: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 9, 2026
CVE-2026-108160: Download of Code Without Integrity Check7.5 High7.7 High0%Oct 9, 2026
CVE-2026-108159: Improper Neutralization of Input During Web Page Generation7.5 High7.7 High0%Oct 9, 2026
CVE-2026-108158: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.1 High0%Oct 9, 2026
CVE-2026-108157: Improper Authentication8.1 High9.2 Critical1%Oct 9, 2026
CVE-2026-108156: External Control of File Name or Path7.1 High6.9 Medium0%Oct 9, 2026
CVE-2026-108119: Improper Link Resolution Before File Access6.3 MediumN/A0%Oct 9, 2026
CVE-2026-108093: NULL Pointer Dereference5.5 MediumN/A0%Oct 9, 2026
CVE-2026-107815: Out-of-bounds Write8.5 HighN/A1%Oct 9, 2026
CVE-2025-61560: Undefined Security Weakness8.1 HighN/A0%Oct 9, 2026
CVE-2016-20098: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 9, 2026
CVE-2026-90983: Use of Client-Side Authentication8.2 HighN/A0%Oct 9, 2026
CVE-2026-75349: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-75348: Out-of-bounds Read7.5 HighN/A1%Oct 9, 2026
CVE-2026-75346: Out-of-bounds Read7.5 HighN/A1%Oct 9, 2026
CVE-2026-75345: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-108113: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Oct 9, 2026
CVE-2026-108112: Missing Authorization5.4 Medium5.3 Medium0%Oct 9, 2026
6826-6850 of 407346