The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76976: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-76975: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-76972: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-58249: Integer Underflow (Wrap or Wraparound)7.5 HighN/A0%Oct 13, 2026
CVE-2026-58242: Integer Underflow (Wrap or Wraparound)3.5 LowN/A0%Oct 13, 2026
CVE-2026-108945: Improper Control of Generation of Code5.3 Medium4.8 Medium0%Oct 13, 2026
CVE-2026-108944: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108943: Improper Control of Generation of Code5.3 Medium1.9 Low0%Oct 13, 2026
CVE-2026-108942: Improper Neutralization of Input During Web Page Generation3.5 Low5.1 Medium0%Oct 13, 2026
CVE-2026-87689: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 13, 2026
CVE-2026-96119: Improper Control of Generation of Code9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-81858: Out-of-bounds Read8.1 HighN/A0%Oct 13, 2026
CVE-2026-19938: Use After Free5.9 MediumN/A0%Oct 13, 2026
CVE-2026-19937: Missing Release of Resource after Effective Lifetime5.7 MediumN/A0%Oct 13, 2026
CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization4.8 MediumN/A0%Oct 13, 2026
CVE-2026-18343: Improper Privilege Management4.4 MediumN/A0%Oct 13, 2026
CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17487: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 13, 2026
CVE-2026-108941: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108940: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-108939: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor8.1 HighN/A0%Oct 12, 2026
CVE-2026-93891: Improper Restriction of XML External Entity Reference7.6 HighN/A0%Oct 12, 2026
7726-7750 of 417319
‹›