The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105458: Reliance on Untrusted Inputs in a Security Decision4.3 MediumN/A0%Oct 13, 2026
CVE-2026-104661: Incorrect Privilege Assignment4.3 MediumN/A0%Oct 13, 2026
CVE-2026-103549: Incorrect Authorization2.7 LowN/A0%Oct 13, 2026
CVE-2026-101168: Insertion of Sensitive Information into Log File6.2 MediumN/A0%Oct 13, 2026
CVE-2026-100755: Acceptance of Extraneous Untrusted Data With Trusted Data4.6 MediumN/A0%Oct 13, 2026
CVE-2026-100104: Server-Side Request Forgery (SSRF)3.5 LowN/A0%Oct 13, 2026
CVE-2026-89124: Incorrect Authorization4.3 MediumN/A0%Oct 13, 2026
CVE-2026-89122: URL Redirection to Untrusted Site6.1 MediumN/A0%Oct 13, 2026
CVE-2026-89121: Missing Authorization4.7 MediumN/A0%Oct 13, 2026
CVE-2026-89120: Initialization of a Resource with an Insecure Default7.1 HighN/A0%Oct 13, 2026
CVE-2026-89118: Files or Directories Accessible to External Parties5.3 MediumN/A0%Oct 13, 2026
CVE-2026-89117: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-89116: Improper Neutralization of Special Elements used in an OS Command5.9 MediumN/A0%Oct 13, 2026
CVE-2026-89113: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 13, 2026
CVE-2026-89112: Missing Authorization6.5 MediumN/A0%Oct 13, 2026
CVE-2026-89111: Server-Side Request Forgery (SSRF)10.0 CriticalN/A0%Oct 13, 2026
CVE-2026-89110: Exposed Dangerous Method or Function9.9 CriticalN/A0%Oct 13, 2026
CVE-2026-89108: Missing Authorization9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-89107: Improper Control of Generation of Code9.9 CriticalN/A0%Oct 13, 2026
CVE-2026-89106: Permissive List of Allowed Inputs4.4 MediumN/A0%Oct 13, 2026
CVE-2026-89105: Initialization of a Resource with an Insecure Default4.2 MediumN/A0%Oct 13, 2026
CVE-2026-76976: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-76975: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-76972: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-58249: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Oct 13, 2026
7501-7525 of 417319
‹›