The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-96306: Out-of-bounds Read7.8 HighN/A0%Oct 13, 2026
CVE-2026-96305: Use After Free7.0 HighN/A0%Oct 13, 2026
CVE-2026-96302: Use After Free7.0 HighN/A0%Oct 13, 2026
CVE-2026-96248: Stack-based Buffer Overflow7.5 HighN/A1%Oct 13, 2026
CVE-2026-96247: Use of Uninitialized Resource5.5 MediumN/A0%Oct 13, 2026
CVE-2026-96246: Out-of-bounds Read7.5 HighN/A1%Oct 13, 2026
CVE-2026-96245: Out-of-bounds Read7.5 HighN/A1%Oct 13, 2026
CVE-2026-96244: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-96236: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 13, 2026
CVE-2026-96224: Out-of-bounds Write8.8 HighN/A1%Oct 13, 2026
CVE-2026-96223: Use After Free7.8 HighN/A0%Oct 13, 2026
CVE-2026-96222: Improper Certificate Validation7.4 HighN/A1%Oct 13, 2026
CVE-2026-96220: Improper Control of Generation of Code7.8 HighN/A1%Oct 13, 2026
CVE-2026-96219: Out-of-bounds Write9.8 CriticalN/A1%Oct 13, 2026
CVE-2026-96218: External Control of System or Configuration Setting5.5 MediumN/A1%Oct 13, 2026
CVE-2026-96217: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-96216: Use After Free7.0 HighN/A0%Oct 13, 2026
CVE-2026-96215: Concurrent Execution using Shared Resource with Improper Synchronization7.0 HighN/A0%Oct 13, 2026
CVE-2026-96204: Server-Side Request Forgery (SSRF)6.5 MediumN/A1%Oct 13, 2026
CVE-2026-70049: Improper Neutralization of Special Elements used in an SQL Command8.0 HighN/A2%Oct 13, 2026
CVE-2026-88208: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-88209: Improper Neutralization of Input During Web Page Generation4.6 MediumN/A0%Oct 13, 2026
CVE-2026-88204: Improper Neutralization of Input During Web Page Generation7.3 HighN/A1%Oct 13, 2026
CVE-2026-88202: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-88198: Missing Authorization8.8 HighN/A1%Oct 13, 2026
801-825 of 16846