The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-105120: Exposure of Sensitive Information to an Unauthorized Actor4.9 Medium6.9 Medium0%Oct 3, 2026
CVE-2026-96267: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Oct 3, 2026
CVE-2026-94505: Missing Authorization8.1 HighN/A0%Oct 3, 2026
CVE-2026-18443: Improper Neutralization of Special Elements used in an SQL Command8.8 HighN/A0%Oct 3, 2026
CVE-2026-96650: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 3, 2026
CVE-2026-94239: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 3, 2026
CVE-2026-88783: Improper Neutralization of Input During Web Page Generation8.8 HighN/A0%Oct 3, 2026
CVE-2026-88782: Improper Neutralization of Input During Web Page Generation6.8 MediumN/A0%Oct 3, 2026
CVE-2026-87091: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 3, 2026
CVE-2026-85015: Improper Limitation of a Pathname to a Restricted Directory6.6 MediumN/A0%Oct 3, 2026
CVE-2026-80517: Improper Neutralization of Input During Web Page Generation3.5 LowN/A0%Oct 3, 2026
CVE-2026-103909: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2026
CVE-2026-103514: Improper Authentication7.5 HighN/A0%Oct 3, 2026
CVE-2026-101928: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 3, 2026
CVE-2026-101923: Missing Authorization8.1 HighN/A0%Oct 3, 2026
CVE-2026-101357: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Oct 3, 2026
CVE-2026-101159: Improper Neutralization of Input During Web Page Generation7.5 HighN/A0%Oct 3, 2026
CVE-2026-97644: Improper Privilege Management8.8 HighN/A0%Oct 3, 2026
CVE-2026-96270: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 3, 2026
CVE-2026-92243: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 3, 2026
CVE-2026-105046: Direct Request4.3 MediumN/A0%Oct 2, 2026
CVE-2026-82042: Missing Authentication for Critical Function9.8 Critical9.3 Critical1%Oct 2, 2026
CVE-2026-75937: Improper Neutralization of Special Elements used in an OS CommandN/A9.4 Critical1%Oct 2, 2026
CVE-2026-94483: Server-Side Request Forgery (SSRF)6.5 Medium8.3 High0%Oct 2, 2026
CVE-2026-93875: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 2, 2026
76-100 of 17413
‹›