The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-54858: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-54857: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-54856: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-48200: Insertion of Sensitive Information Into Sent Data5.3 MediumN/A0%Oct 29, 2026
CVE-2026-42701: Deserialization of Untrusted Data7.2 HighN/A0%Oct 29, 2026
CVE-2026-42694: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.3 MediumN/A0%Oct 29, 2026
CVE-2026-42692: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 29, 2026
CVE-2026-42690: Missing Authorization5.4 MediumN/A0%Oct 29, 2026
CVE-2026-27394: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 29, 2026
CVE-2026-18894: Improper Control of Generation of Code9.8 CriticalN/A0%Oct 29, 2026
CVE-2026-119145: Improper Limitation of a Pathname to a Restricted Directory9.9 Critical9.4 Critical1%Oct 29, 2026
CVE-2026-119144: Improper Neutralization of Special Elements Used in a Template Engine8.8 High8.7 High0%Oct 29, 2026
CVE-2026-119143: Improper Validation of Array Index4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119142: Reachable Assertion4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119141: Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls5.3 Medium6.9 Medium0%Oct 29, 2026
CVE-2026-119140: Incomplete Internal State Distinction4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119139: Reachable Assertion4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119138: Reachable Assertion4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119137: Uncontrolled Recursion5.3 Medium6.9 Medium0%Oct 29, 2026
CVE-2026-119136: Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119135: Reachable Assertion4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119134: Allocation of Resources Without Limits or Throttling6.2 Medium6.9 Medium0%Oct 29, 2026
CVE-2026-119133: Reliance on Undefined, Unspecified, or Implementation-Defined Behavior2.6 Low2.1 Low0%Oct 29, 2026
CVE-2026-119132: Reachable Assertion4.8 Medium5.9 Medium0%Oct 29, 2026
CVE-2026-119131: Integer Overflow or Wraparound5.3 Medium6.9 Medium0%Oct 29, 2026
951-975 of 411099