The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-89116: Improper Neutralization of Special Elements used in an OS Command5.9 MediumN/A0%Oct 13, 2026
CVE-2026-89113: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 13, 2026
CVE-2026-89112: Missing Authorization6.5 MediumN/A0%Oct 13, 2026
CVE-2026-89111: Server-Side Request Forgery (SSRF)10.0 CriticalN/A0%Oct 13, 2026
CVE-2026-89110: Exposed Dangerous Method or Function9.9 CriticalN/A0%Oct 13, 2026
CVE-2026-89108: Missing Authorization9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-89107: Improper Control of Generation of Code9.9 CriticalN/A0%Oct 13, 2026
CVE-2026-89106: Permissive List of Allowed Inputs4.4 MediumN/A0%Oct 13, 2026
CVE-2026-89105: Initialization of a Resource with an Insecure Default4.2 MediumN/A0%Oct 13, 2026
CVE-2026-76976: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-76975: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-76972: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-58249: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Oct 13, 2026
CVE-2026-58242: Integer Underflow (Wrap or Wraparound)3.5 LowN/A0%Oct 13, 2026
CVE-2026-108945: Improper Control of Generation of Code5.3 Medium4.8 Medium0%Oct 13, 2026
CVE-2026-108944: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108943: Improper Control of Generation of Code5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-108942: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Oct 13, 2026
CVE-2026-87689: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-96119: Improper Control of Generation of Code9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-81858: Out-of-bounds Read8.1 HighN/A0%Oct 13, 2026
CVE-2026-19938: Use After Free5.9 MediumN/A0%Oct 13, 2026
CVE-2026-19937: Missing Release of Resource after Effective Lifetime5.7 MediumN/A0%Oct 13, 2026
CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization4.8 MediumN/A0%Oct 13, 2026
7551-7575 of 417319
‹›