The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107058: Improper Authentication9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-107057: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107056: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107055: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107053: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107052: Incorrect Default Permissions7.5 HighN/AN/AOct 29, 2026
CVE-2026-107051: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107050: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107049: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107048: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107047: Incorrect Permission Assignment for Critical Resource7.5 HighN/AN/AOct 29, 2026
CVE-2026-107046: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107045: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107044: Undefined Security Weakness7.5 HighN/AN/AOct 29, 2026
CVE-2026-107043: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2025-12523: Missing Authorization6.5 MediumN/AN/AOct 29, 2026
CVE-2023-7357: Inclusion of Functionality from Untrusted Control SphereN/A8.6 HighN/AOct 29, 2026
CVE-2026-96192: Use After Free8.8 HighN/A1%Oct 29, 2026
CVE-2026-93680: Improper Authentication9.8 CriticalN/A2%Oct 29, 2026
CVE-2026-93571: Improper Limitation of a Pathname to a Restricted DirectoryN/A2.3 Low0%Oct 29, 2026
CVE-2026-93570: Improper Restriction of XML External Entity ReferenceN/A8.2 High0%Oct 29, 2026
CVE-2026-90991: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 29, 2026
CVE-2026-90872: Improper Neutralization of Directives in Dynamically Evaluated Code6.6 MediumN/A0%Oct 29, 2026
CVE-2026-90871: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Oct 29, 2026
CVE-2026-90870: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 29, 2026
876-900 of 419499