The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-44179: Improper Neutralization of Directives in Dynamically Evaluated Code9.9 CriticalN/AN/AOct 28, 2026
CVE-2026-118029: Unverified Ownership5.9 Medium5.9 MediumN/AOct 28, 2026
CVE-2026-116778: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/AN/AOct 28, 2026
CVE-2026-116776: Heap-based Buffer OverflowN/A7.0 HighN/AOct 28, 2026
CVE-2026-112357: Incorrect Default Permissions7.8 High8.5 HighN/AOct 28, 2026
CVE-2026-112356: Improper Neutralization of Input During Web Page Generation6.1 Medium5.1 MediumN/AOct 28, 2026
Alma Linux: CVE-2026-93520: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/AN/AOct 28, 2026
Alma Linux: CVE-2026-93519: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/AN/AOct 28, 2026
Alma Linux: CVE-2026-93518: Important: xorg-x11-server security update (Multiple Advisories)7.8 HighN/AN/AOct 28, 2026
CVE-2026-115402: Concurrent Execution using Shared Resource with Improper SynchronizationN/A5.7 MediumN/AOct 28, 2026
CVE-2026-106972: Undefined Security WeaknessN/AN/AN/AOct 28, 2026
CVE-2026-106971: Undefined Security WeaknessN/AN/AN/AOct 28, 2026
Alma Linux: CVE-2026-93517: Important: xorg-x11-server security update (Multiple Advisories)N/A8.5 HighN/AOct 28, 2026
CVE-2026-59959: Divide By ZeroN/A4.8 MediumN/AOct 28, 2026
CVE-2026-59185: Authorization Bypass Through User-Controlled Key8.5 HighN/AN/AOct 28, 2026
CVE-2026-59179: Improper Limitation of a Pathname to a Restricted Directory8.3 HighN/AN/AOct 28, 2026
CVE-2026-59177: Binding to an Unrestricted IP Address8.8 HighN/AN/AOct 28, 2026
CVE-2026-59176: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/AN/AOct 28, 2026
CVE-2026-59172: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/AN/AOct 28, 2026
CVE-2026-59164: Missing Authorization7.1 HighN/AN/AOct 28, 2026
CVE-2026-52729: Missing Authorization7.1 HighN/AN/AOct 28, 2026
CVE-2026-50541: Missing Authorization6.5 MediumN/AN/AOct 28, 2026
CVE-2026-116390: Deserialization of Untrusted Data7.2 HighN/AN/AOct 28, 2026
CVE-2026-116389: Deserialization of Untrusted Data8.8 HighN/AN/AOct 28, 2026
CVE-2026-116078: Allocation of Resources Without Limits or ThrottlingN/A8.7 HighN/AOct 28, 2026
976-1000 of 548327