The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17487: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 13, 2026
CVE-2026-17484: Exposure of Sensitive Information to an Unauthorized Actor5.5 MediumN/A0%Oct 13, 2026
CVE-2026-108941: Improper Control of Generation of Code4.8 Medium2.4 Low0%Oct 13, 2026
CVE-2026-108940: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium5.5 Medium1%Oct 13, 2026
CVE-2026-108939: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-93892: Exposure of Sensitive Information to an Unauthorized Actor8.1 HighN/A0%Oct 12, 2026
CVE-2026-93891: Improper Restriction of XML External Entity Reference7.6 HighN/A0%Oct 12, 2026
CVE-2026-92832: Cleartext Transmission of Sensitive Information5.1 MediumN/A0%Oct 12, 2026
CVE-2026-85457: Stack-based Buffer Overflow8.1 HighN/A0%Oct 12, 2026
CVE-2026-84418: Improper Certificate Validation7.4 HighN/A0%Oct 12, 2026
CVE-2026-82110: Improper Limitation of a Pathname to a Restricted Directory9.9 CriticalN/A1%Oct 12, 2026
CVE-2026-82108: Improper Control of Generation of Code8.8 HighN/A0%Oct 12, 2026
CVE-2026-82103: Exposure of Sensitive Information to an Unauthorized Actor6.5 MediumN/A0%Oct 12, 2026
CVE-2026-82101: Improper Limitation of a Pathname to a Restricted Directory9.6 CriticalN/A0%Oct 12, 2026
CVE-2026-82096: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Oct 12, 2026
CVE-2026-75782: Untrusted Search Path7.8 HighN/A0%Oct 12, 2026
CVE-2026-75621: Execution with Unnecessary Privileges6.2 MediumN/A0%Oct 12, 2026
CVE-2026-75095: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 12, 2026
CVE-2026-75076: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 12, 2026
CVE-2026-75063: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 12, 2026
CVE-2026-75061: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A0%Oct 12, 2026
CVE-2026-19627: Improper Limitation of a Pathname to a Restricted Directory8.2 HighN/A0%Oct 12, 2026
CVE-2026-19622: Authentication Bypass Using an Alternate Path or Channel9.8 CriticalN/A0%Oct 12, 2026
CVE-2026-19620: Authentication Bypass Using an Alternate Path or Channel8.8 HighN/A0%Oct 12, 2026
7826-7850 of 417319
‹›