The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-95696: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 13, 2026
CVE-2026-95695: Incorrect Authorization9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-93909: Session Fixation9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-93905: Deserialization of Untrusted Data8.2 HighN/A0%Oct 13, 2026
CVE-2026-93895: Improper Access Control9.1 CriticalN/A0%Oct 13, 2026
CVE-2026-79715: Improper Limitation of a Pathname to a Restricted Directory5.5 MediumN/A0%Oct 13, 2026
CVE-2026-77816: Improper Certificate Validation6.5 MediumN/A0%Oct 13, 2026
CVE-2026-14909: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Oct 13, 2026
CVE-2026-14532: Integer Overflow or Wraparound4.3 MediumN/A0%Oct 13, 2026
CVE-2026-11713: Incorrect Authorization5.4 MediumN/A0%Oct 13, 2026
CVE-2026-105443: Improper Access Control8.2 HighN/A0%Oct 13, 2026
CVE-2026-105442: Deserialization of Untrusted Data7.5 HighN/A0%Oct 13, 2026
CVE-2026-101294: Missing Cryptographic Step8.7 HighN/A0%Oct 13, 2026
CVE-2026-110247: Undefined Security Weakness8.4 HighN/A0%Oct 13, 2026
CVE-2026-65198: Use of Hard-coded Cryptographic Key8.6 HighN/A0%Oct 13, 2026
CVE-2026-53711: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 13, 2026
CVE-2026-53709: Improper Authentication9.8 CriticalN/A1%Oct 13, 2026
CVE-2026-95680: Improper Authentication8.0 HighN/A0%Oct 13, 2026
CVE-2026-93907: Improper Authentication8.1 HighN/A0%Oct 13, 2026
CVE-2026-103499: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 13, 2026
CVE-2026-96119: Improper Control of Generation of Code9.9 CriticalN/A1%Oct 13, 2026
CVE-2026-93886: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-81858: Out-of-bounds Read8.1 HighN/A0%Oct 13, 2026
CVE-2026-18343: Improper Privilege Management4.4 MediumN/A0%Oct 13, 2026
CVE-2026-18318: Improper Restriction of Excessive Authentication Attempts5.3 MediumN/A0%Oct 13, 2026
76-100 of 9776