The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-103409: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-103408: Stack-based Buffer Overflow8.8 HighN/A0%Oct 28, 2026
CVE-2026-103407: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Oct 28, 2026
CVE-2026-103406: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Oct 28, 2026
CVE-2026-103405: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.8 MediumN/A0%Oct 28, 2026
CVE-2026-103404: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Oct 28, 2026
CVE-2026-103403: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Oct 28, 2026
CVE-2026-103402: Insufficient Verification of Data Authenticity8.8 HighN/A0%Oct 28, 2026
CVE-2026-103401: Improper Link Resolution Before File Access8.8 HighN/A0%Oct 28, 2026
CVE-2026-103393: Out-of-bounds Read4.3 MediumN/A0%Oct 28, 2026
CVE-2026-103392: Out-of-bounds Write4.8 MediumN/A0%Oct 28, 2026
CVE-2026-103391: Out-of-bounds Write5.3 MediumN/A0%Oct 28, 2026
CVE-2026-100105: Incorrect Authorization7.7 HighN/A0%Oct 28, 2026
CVE-2026-103410: Integer Overflow or Wraparound7.5 HighN/A0%Oct 28, 2026
CVE-2026-103400: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.5 MediumN/A0%Oct 28, 2026
CVE-2026-103394: Improper Initialization3.7 LowN/A0%Oct 28, 2026
CVE-2026-103390: Out-of-bounds Read5.3 MediumN/A0%Oct 28, 2026
Alma Linux: CVE-2026-93522: Important: xorg-x11-server-Xwayland security update (ALSA-2026-85193)7.8 HighN/A0%Oct 28, 2026
Alma Linux: CVE-2026-93521: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/A0%Oct 28, 2026
CVE-2026-67187: Improper Neutralization of Formula Elements in a CSV File7.1 High5.1 Medium0%Oct 28, 2026
CVE-2026-59979: Authorization Bypass Through User-Controlled Key8.3 HighN/A0%Oct 28, 2026
CVE-2026-56828: Improper Authorization8.8 HighN/A0%Oct 28, 2026
CVE-2026-50543: Missing Authorization4.3 MediumN/A0%Oct 28, 2026
CVE-2026-50542: Missing Authorization5.4 MediumN/A0%Oct 28, 2026
CVE-2026-50539: Missing Authorization6.5 MediumN/A0%Oct 28, 2026
951-975 of 414193