The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118773: Uncontrolled Resource ConsumptionN/A6.3 Medium0%Oct 29, 2026
CVE-2026-118772: Inefficient Regular Expression Complexity7.5 HighN/A0%Oct 29, 2026
CVE-2026-103094: Plaintext Storage of a PasswordN/A7.1 High0%Oct 29, 2026
CVE-2026-103093: Improper Access ControlN/A9.4 Critical0%Oct 29, 2026
CVE-2026-60111: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-51912: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-51905: Undefined Security Weakness8.8 HighN/A0%Oct 29, 2026
CVE-2026-51903: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-51902: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-51863: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-51851: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-118769: Out-of-bounds ReadN/A9.2 Critical0%Oct 29, 2026
CVE-2026-118768: Improper Verification of Cryptographic SignatureN/A5.9 Medium0%Oct 29, 2026
CVE-2026-118767: Improper Neutralization of Null Byte or NUL Character4.8 MediumN/A0%Oct 29, 2026
CVE-2026-118766: Server-Side Request Forgery (SSRF)6.1 MediumN/A0%Oct 29, 2026
CVE-2026-116566: Improper Neutralization of Null Byte or NUL CharacterN/A5.3 Medium0%Oct 29, 2026
CVE-2026-107347: Improper Link Resolution Before File Access8.4 HighN/A0%Oct 29, 2026
CVE-2026-102260: Incorrect Authorization4.3 MediumN/A0%Oct 29, 2026
CVE-2026-62374: Improper Check for Unusual or Exceptional ConditionsN/A7.1 High0%Oct 29, 2026
CVE-2026-11587: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Oct 29, 2026
CVE-2026-119115: Incorrect Authorization8.5 High8.4 High0%Oct 29, 2026
CVE-2026-118765: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)N/A7.3 High0%Oct 29, 2026
CVE-2026-118764: Asymmetric Resource Consumption (Amplification)N/A6.9 Medium0%Oct 29, 2026
CVE-2026-118763: Insufficiently Protected Credentials7.4 HighN/A0%Oct 29, 2026
CVE-2026-118762: Inclusion of Functionality from Untrusted Control Sphere9.3 CriticalN/A0%Oct 29, 2026
851-875 of 417872