The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-44414: Path Traversal: '.../...//'6.8 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109854: Use of Uninitialized Variable2.5 LowN/A0%Oct 13, 2026
CVE-2026-109162: Incorrect Behavior OrderN/A6.3 Medium1%Oct 13, 2026
CVE-2026-109152: Improper Limitation of a Pathname to a Restricted Directory5.4 Medium5.3 Medium1%Oct 13, 2026
CVE-2026-109149: Memory Allocation with Excessive Size Value5.3 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-109144: Uncontrolled Resource Consumption5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-102076: Stack-based Buffer Overflow7.5 High8.7 High1%Oct 13, 2026
CVE-2026-102075: Stack-based Buffer Overflow7.5 High8.7 High1%Oct 13, 2026
CVE-2026-102074: Stack-based Buffer Overflow7.5 High8.7 High1%Oct 13, 2026
CVE-2026-102073: Integer Underflow (Wrap or Wraparound)8.2 High8.8 High0%Oct 13, 2026
CVE-2026-96535: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 13, 2026
CVE-2026-89309: Missing Authentication for Critical Function10.0 Critical10.0 Critical0%Oct 13, 2026
CVE-2026-13138: Client-Side Enforcement of Server-Side Security8.6 HighN/A0%Oct 13, 2026
CVE-2026-109699: Missing Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109697: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-109696: Missing Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109691: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-109687: Improper Neutralization of Special Elements used in an SQL Command7.6 HighN/A0%Oct 13, 2026
CVE-2026-109684: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-109143: Improper Privilege Management5.4 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109116: Authorization Bypass Through User-Controlled Key7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109115: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109114: Improper Authentication7.3 High5.5 Medium1%Oct 13, 2026
CVE-2026-109110: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical2%Oct 13, 2026
CVE-2026-108496: Missing Authorization5.3 MediumN/A0%Oct 13, 2026
7251-7275 of 413034
‹›