The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118769: Out-of-bounds ReadN/A9.2 Critical0%Oct 29, 2026
CVE-2026-118768: Improper Verification of Cryptographic SignatureN/A5.9 Medium0%Oct 29, 2026
CVE-2026-118767: Improper Neutralization of Null Byte or NUL Character4.8 MediumN/A0%Oct 29, 2026
CVE-2026-118766: Server-Side Request Forgery (SSRF)6.1 MediumN/A0%Oct 29, 2026
CVE-2026-116566: Improper Neutralization of Null Byte or NUL CharacterN/A5.3 Medium0%Oct 29, 2026
CVE-2026-107347: Improper Link Resolution Before File Access8.4 HighN/A0%Oct 29, 2026
CVE-2026-102260: Incorrect Authorization4.3 MediumN/A0%Oct 29, 2026
CVE-2026-62374: Improper Check for Unusual or Exceptional ConditionsN/A7.1 High0%Oct 29, 2026
CVE-2026-11587: Improper Neutralization of Special Elements used in an SQL Command7.2 HighN/A0%Oct 29, 2026
CVE-2026-119115: Incorrect Authorization8.5 High8.4 High0%Oct 29, 2026
CVE-2026-118765: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)N/A7.3 High0%Oct 29, 2026
CVE-2026-118764: Asymmetric Resource Consumption (Amplification)N/A6.9 Medium0%Oct 29, 2026
CVE-2026-118763: Insufficiently Protected Credentials7.4 HighN/A0%Oct 29, 2026
CVE-2026-118762: Inclusion of Functionality from Untrusted Control Sphere9.3 CriticalN/A0%Oct 29, 2026
CVE-2026-118761: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Oct 29, 2026
CVE-2026-118760: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 29, 2026
CVE-2026-118759: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 29, 2026
CVE-2026-118758: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Oct 29, 2026
CVE-2026-115805: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 29, 2026
CVE-2026-107060: Undefined Security Weakness9.1 CriticalN/A0%Oct 29, 2026
CVE-2026-107059: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107058: Improper Authentication9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-107057: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107056: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107055: Undefined Security Weakness7.5 HighN/A0%Oct 29, 2026
876-900 of 421285