The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108119: Improper Link Resolution Before File Access6.3 MediumN/A0%Oct 9, 2026
CVE-2026-108093: NULL Pointer Dereference5.5 MediumN/A0%Oct 9, 2026
CVE-2026-107815: Out-of-bounds Write8.5 HighN/A1%Oct 9, 2026
CVE-2025-61560: Undefined Security Weakness8.1 HighN/A0%Oct 9, 2026
CVE-2016-20098: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 9, 2026
CVE-2026-90983: Use of Client-Side Authentication8.2 HighN/A0%Oct 9, 2026
CVE-2026-75349: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-75348: Out-of-bounds Read7.5 HighN/A1%Oct 9, 2026
CVE-2026-75346: Out-of-bounds Read7.5 HighN/A1%Oct 9, 2026
CVE-2026-75345: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 9, 2026
CVE-2026-108113: Unrestricted Upload of File with Dangerous Type8.8 High8.7 High1%Oct 9, 2026
CVE-2026-108112: Missing Authorization5.4 Medium5.3 Medium0%Oct 9, 2026
CVE-2026-108111: Missing Authorization4.3 Medium5.3 Medium0%Oct 9, 2026
CVE-2026-108110: Authorization Bypass Through User-Controlled Key6.8 Medium7.6 High0%Oct 9, 2026
CVE-2026-107814: Incorrect Permission Assignment for Critical Resource8.4 HighN/A0%Oct 9, 2026
CVE-2026-107813: Missing Authorization8.8 HighN/A0%Oct 9, 2026
CVE-2026-107812: Download of Code Without Integrity Check7.5 HighN/A0%Oct 9, 2026
CVE-2026-107811: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Oct 9, 2026
CVE-2026-107810: Improper Link Resolution Before File Access8.1 HighN/A0%Oct 9, 2026
CVE-2026-107809: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Oct 9, 2026
CVE-2026-107808: Improper Authentication8.1 HighN/A0%Oct 9, 2026
CVE-2026-107807: Cleartext Storage of Sensitive Information8.8 HighN/A0%Oct 9, 2026
CVE-2026-107783: Insertion of Sensitive Information into Log File5.9 Medium6.7 Medium0%Oct 9, 2026
CVE-2026-104084: Insufficient Session Expiration8.8 High8.7 High0%Oct 9, 2026
CVE-2026-104083: Improper Neutralization of Input During Web Page Generation6.1 Medium5.3 Medium0%Oct 9, 2026
6851-6875 of 407346
‹›