The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-118174: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118173: Improper Input ValidationN/A6.1 MediumN/AOct 27, 2026
CVE-2026-118172: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118171: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118170: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-116683: Insufficiently Protected CredentialsN/A7.1 HighN/AOct 27, 2026
CVE-2026-115413: Origin Validation Error7.8 High7.3 HighN/AOct 27, 2026
CVE-2026-88812: Double Free7.8 HighN/AN/AOct 27, 2026
CVE-2026-87086: Unchecked Return Value to NULL Pointer Dereference7.5 HighN/AN/AOct 27, 2026
CVE-2026-87085: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/AN/AOct 27, 2026
CVE-2026-57202: Privilege Defined With Unsafe Actions8.1 HighN/AN/AOct 27, 2026
CVE-2026-57188: Out-of-bounds WriteN/A7.1 HighN/AOct 27, 2026
CVE-2026-16491: Missing Authorization6.5 MediumN/AN/AOct 27, 2026
CVE-2026-118132: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118131: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-117526: Improper Control of Generation of Code5.3 Medium1.9 LowN/AOct 27, 2026
CVE-2026-117516: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-117515: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 MediumN/AOct 27, 2026
CVE-2026-116682: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/AN/AOct 27, 2026
CVE-2026-116680: Server-Side Request Forgery (SSRF)6.4 MediumN/AN/AOct 27, 2026
CVE-2026-116679: Incorrect Authorization5.4 MediumN/AN/AOct 27, 2026
CVE-2026-116678: Server-Side Request Forgery (SSRF)5.8 MediumN/AN/AOct 27, 2026
CVE-2026-116677: Missing AuthorizationN/A5.3 MediumN/AOct 27, 2026
CVE-2026-116676: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/AN/AOct 27, 2026
CVE-2026-116662: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/AN/AOct 27, 2026
976-1000 of 416436