The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-109709: Exposure of Sensitive Information to an Unauthorized Actor8.8 HighN/A0%Oct 13, 2026
CVE-2026-109708: Improper Restriction of Operations within the Bounds of a Memory Buffer9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-109707: Use After Free9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-109706: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109705: Use After Free9.6 CriticalN/A0%Oct 13, 2026
CVE-2026-109704: Improper Privilege Management8.8 HighN/A0%Oct 13, 2026
CVE-2026-109407: Concurrent Execution using Shared Resource with Improper Synchronization3.1 Low2.3 Low0%Oct 13, 2026
CVE-2026-109406: Undefined Security Weakness5.4 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109405: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109404: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-109403: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-94410: Missing Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89279: Cross-Site Request Forgery (CSRF)6.5 MediumN/A0%Oct 13, 2026
CVE-2026-63316: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Oct 13, 2026
CVE-2026-109832: Loop with Unreachable Exit Condition7.5 HighN/A0%Oct 13, 2026
CVE-2026-109402: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109190: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109189: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109160: URL Redirection to Untrusted Site4.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109157: Stack-based Buffer Overflow9.9 Critical8.6 High1%Oct 13, 2026
CVE-2026-109156: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109155: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109153: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-89208: Out-of-bounds Read5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-89206: Client-Side Enforcement of Server-Side Security6.3 Medium5.3 Medium0%Oct 13, 2026
7201-7225 of 414469
‹›