The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108960: Out-of-bounds Read5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-108959: Improper Neutralization of Special Elements used in an SQL Command6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-108958: Deserialization of Untrusted Data6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-108957: Improper Control of Generation of Code6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-9268: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-97229: Integer Overflow or Wraparound10.0 CriticalN/A1%Oct 13, 2026
CVE-2026-96893: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.3 HighN/A1%Oct 13, 2026
CVE-2026-92883: Improper Neutralization of Input During Web Page Generation8.7 HighN/A0%Oct 13, 2026
CVE-2026-92528: Incorrect Authorization4.2 MediumN/A0%Oct 13, 2026
CVE-2026-85529: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-84284: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-82632: Incorrect Authorization3.1 LowN/A0%Oct 13, 2026
CVE-2026-81839: Incorrect Authorization7.7 HighN/A0%Oct 13, 2026
CVE-2026-7767: URL Redirection to Untrusted Site5.8 MediumN/A0%Oct 13, 2026
CVE-2026-78335: Incorrect Authorization4.2 MediumN/A0%Oct 13, 2026
CVE-2026-6567: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-5954: Incorrect Authorization4.2 MediumN/A0%Oct 13, 2026
CVE-2026-35001: Integer Overflow or Wraparound7.0 High7.1 High0%Oct 13, 2026
CVE-2026-16301: Incorrect Authorization8.5 HighN/A0%Oct 13, 2026
CVE-2026-16275: Incorrect Authorization5.3 MediumN/A0%Oct 13, 2026
CVE-2026-14814: Permissive Regular Expression8.2 HighN/A0%Oct 13, 2026
CVE-2026-14552: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-14210: Insufficient Granularity of Access Control4.3 MediumN/A0%Oct 13, 2026
CVE-2026-108956: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-108955: Out-of-bounds Read5.3 Medium1.9 Low0%Oct 13, 2026
7401-7425 of 417319
‹›