The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-70282: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-70257: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-70269: Heap-based Buffer Overflow8.1 HighN/A1%Oct 13, 2026
CVE-2026-70251: Server-Side Request Forgery (SSRF)7.5 HighN/A1%Oct 13, 2026
CVE-2026-70206: Out-of-bounds Read6.5 MediumN/A1%Oct 13, 2026
CVE-2026-70267: Inclusion of Functionality from Untrusted Control Sphere7.2 HighN/A1%Oct 13, 2026
CVE-2026-70256: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-70220: Heap-based Buffer Overflow7.8 HighN/A0%Oct 13, 2026
CVE-2026-70268: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-70194: Improper Certificate Validation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-70197: Out-of-bounds Write8.1 HighN/A1%Oct 13, 2026
CVE-2026-70188: Inconsistent Interpretation of HTTP Requests9.1 CriticalN/A1%Oct 13, 2026
CVE-2026-70190: Improper Link Resolution Before File Access7.3 HighN/A0%Oct 13, 2026
CVE-2026-70183: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A1%Oct 13, 2026
CVE-2026-70181: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 13, 2026
CVE-2026-70179: Authentication Bypass by Spoofing7.5 HighN/A1%Oct 13, 2026
CVE-2026-70196: Inefficient Algorithmic Complexity5.9 MediumN/A1%Oct 13, 2026
CVE-2026-70175: Weak Password Recovery Mechanism for Forgotten Password8.1 HighN/A1%Oct 13, 2026
CVE-2026-70165: Improper Link Resolution Before File Access6.7 MediumN/A0%Oct 13, 2026
CVE-2026-70161: Improper Limitation of a Pathname to a Restricted Directory7.3 HighN/A0%Oct 13, 2026
CVE-2026-70159: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 13, 2026
CVE-2026-70174: Improperly Implemented Security Check for Standard8.8 HighN/A1%Oct 13, 2026
CVE-2026-70186: Deadlock7.5 HighN/A1%Oct 13, 2026
CVE-2026-70149: Heap-based Buffer Overflow8.8 HighN/A1%Oct 13, 2026
CVE-2026-70116: Stack-based Buffer Overflow4.2 MediumN/A0%Oct 13, 2026
826-850 of 16845