The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-111108: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 28, 2026
CVE-2026-111073: Improper Handling of Highly Compressed Data (Data Amplification)N/AN/A0%Oct 28, 2026
CVE-2026-110985: Insufficient Verification of Data AuthenticityN/AN/A0%Oct 28, 2026
CVE-2026-110952: Insufficient Verification of Data AuthenticityN/AN/A0%Oct 28, 2026
CVE-2026-106079: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Oct 28, 2026
CVE-2026-103506: Improper AuthorizationN/A8.9 High0%Oct 28, 2026
CVE-2026-103411: Integer Underflow (Wrap or Wraparound)7.1 HighN/A0%Oct 28, 2026
CVE-2026-103409: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-103408: Stack-based Buffer Overflow8.8 HighN/A0%Oct 28, 2026
CVE-2026-103407: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Oct 28, 2026
CVE-2026-103406: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Oct 28, 2026
CVE-2026-103405: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.8 MediumN/A0%Oct 28, 2026
CVE-2026-103404: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Oct 28, 2026
CVE-2026-103403: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Oct 28, 2026
CVE-2026-103402: Insufficient Verification of Data Authenticity8.8 HighN/A0%Oct 28, 2026
CVE-2026-103401: Improper Link Resolution Before File Access8.8 HighN/A0%Oct 28, 2026
CVE-2026-103393: Out-of-bounds Read4.3 MediumN/A0%Oct 28, 2026
CVE-2026-103392: Out-of-bounds Write4.8 MediumN/A0%Oct 28, 2026
CVE-2026-103391: Out-of-bounds Write5.3 MediumN/A0%Oct 28, 2026
CVE-2026-100105: Incorrect Authorization7.7 HighN/A0%Oct 28, 2026
CVE-2026-103410: Integer Overflow or Wraparound7.5 HighN/A0%Oct 28, 2026
CVE-2026-103400: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.5 MediumN/A0%Oct 28, 2026
CVE-2026-103394: Improper Initialization3.7 LowN/A0%Oct 28, 2026
CVE-2026-103390: Out-of-bounds Read5.3 MediumN/A0%Oct 28, 2026
Alma Linux: CVE-2026-93522: Important: xorg-x11-server-Xwayland security update (ALSA-2026-85193)7.8 HighN/A0%Oct 28, 2026
951-975 of 520238