The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-95680: Improper Authentication8.0 HighN/A0%Oct 13, 2026
CVE-2026-93907: Improper Authentication8.1 HighN/A0%Oct 13, 2026
CVE-2026-77362: Exposure of Sensitive Information to an Unauthorized Actor4.3 MediumN/A0%Oct 13, 2026
CVE-2026-77361: Improper Link Resolution Before File Access4.7 MediumN/A0%Oct 13, 2026
CVE-2026-74041: Improper Handling of Case Sensitivity7.2 High8.6 High0%Oct 13, 2026
CVE-2026-74030: Improper Restriction of Recursive Entity References in DTDs4.9 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109967: NULL Pointer Dereference7.5 High8.7 High1%Oct 13, 2026
CVE-2026-109966: Improper Neutralization of Argument Delimiters in a Command5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109965: Improper Link Resolution Before File Access7.1 High8.4 High0%Oct 13, 2026
CVE-2026-109964: Buffer Underwrite5.6 Medium6.3 Medium0%Oct 13, 2026
CVE-2026-109963: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109962: Improper Authorization4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109961: Improper Neutralization of Special Elements in Output Used by a Downstream Component8.5 High8.4 High0%Oct 13, 2026
CVE-2026-109960: Improper Neutralization of Input During Web Page Generation7.7 High8.7 High0%Oct 13, 2026
CVE-2026-109959: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109958: Exposure of Sensitive Information to an Unauthorized Actor4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109957: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109956: Improper Limitation of a Pathname to a Restricted Directory7.0 High8.3 High0%Oct 13, 2026
CVE-2026-109955: Double Decoding of the Same Data5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization6.5 Medium8.3 High0%Oct 13, 2026
CVE-2026-109953: Insufficiently Protected Credentials5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109952: Selection of Less-Secure Algorithm During Negotiation5.3 Medium6.0 Medium0%Oct 13, 2026
CVE-2026-109951: Out-of-bounds Read5.3 Medium6.9 Medium0%Oct 13, 2026
CVE-2026-109950: Out-of-bounds Read4.3 Medium5.3 Medium0%Oct 13, 2026
CVE-2026-109949: Improper Restriction of Excessive Authentication Attempts6.5 Medium7.1 High0%Oct 13, 2026
9476-9500 of 416032