The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118761: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Oct 29, 2026
CVE-2026-118760: Authorization Bypass Through User-Controlled Key6.5 MediumN/A0%Oct 29, 2026
CVE-2026-118759: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 29, 2026
CVE-2026-118758: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Oct 29, 2026
CVE-2026-115805: Improper Neutralization of Special Elements used in an OS Command7.8 HighN/A0%Oct 29, 2026
CVE-2026-107060: Undefined Security Weakness9.1 CriticalN/A0%Oct 29, 2026
CVE-2026-107059: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107058: Improper Authentication9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-107057: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107056: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107055: Undefined Security Weakness7.5 HighN/A0%Oct 29, 2026
CVE-2026-107053: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107052: Incorrect Default Permissions7.5 HighN/A0%Oct 29, 2026
CVE-2026-107051: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107050: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107049: Undefined Security Weakness7.5 HighN/A0%Oct 29, 2026
CVE-2026-107048: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107047: Incorrect Permission Assignment for Critical Resource7.5 HighN/A0%Oct 29, 2026
CVE-2026-107046: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107045: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107044: Undefined Security Weakness7.5 HighN/A0%Oct 29, 2026
CVE-2026-107043: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2025-12523: Missing Authorization6.5 MediumN/A0%Oct 29, 2026
CVE-2023-7357: Inclusion of Functionality from Untrusted Control SphereN/A8.6 High0%Oct 29, 2026
CVE-2026-96192: Use After Free8.8 HighN/A1%Oct 29, 2026
876-900 of 416086