The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118256: Improper Neutralization of Input During Web Page GenerationN/A2.1 Low0%Oct 28, 2026
CVE-2026-118255: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Oct 28, 2026
CVE-2026-118254: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Oct 28, 2026
CVE-2026-118253: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Oct 28, 2026
CVE-2026-118252: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Oct 28, 2026
CVE-2026-118251: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Oct 28, 2026
CVE-2026-106484: Undefined Security Weakness4.4 MediumN/A0%Oct 28, 2026
CVE-2026-79656: Insertion of Sensitive Information into Log File6.0 MediumN/A0%Oct 28, 2026
CVE-2026-58458: Out-of-bounds Write6.5 Medium6.9 Medium0%Oct 28, 2026
CVE-2026-118250: Improperly Controlled Modification of Object Prototype AttributesN/A7.2 High0%Oct 28, 2026
CVE-2026-118249: Improperly Controlled Modification of Object Prototype AttributesN/A7.2 High0%Oct 28, 2026
CVE-2026-118248: Improperly Controlled Modification of Object Prototype AttributesN/A6.9 Medium0%Oct 28, 2026
CVE-2026-118247: Improperly Controlled Modification of Object Prototype AttributesN/A6.9 Medium0%Oct 28, 2026
CVE-2026-118246: Improper Neutralization of Input During Web Page GenerationN/A8.4 High0%Oct 28, 2026
CVE-2026-118245: Improper Neutralization of Input During Web Page GenerationN/A8.6 High0%Oct 28, 2026
CVE-2026-118244: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Oct 28, 2026
CVE-2026-118243: Improperly Controlled Modification of Object Prototype AttributesN/A5.3 Medium0%Oct 28, 2026
CVE-2026-118242: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Oct 28, 2026
CVE-2026-117501: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 28, 2026
CVE-2026-117500: Inefficient Regular Expression ComplexityN/AN/A0%Oct 28, 2026
CVE-2026-116797: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Oct 28, 2026
CVE-2026-116796: Improper Neutralization of Input During Web Page GenerationN/A7.2 High0%Oct 28, 2026
CVE-2026-116795: Inefficient Algorithmic Complexity7.5 HighN/A0%Oct 28, 2026
CVE-2026-116794: Missing AuthorizationN/A8.3 High0%Oct 28, 2026
CVE-2026-116531: Improper Handling of Length Parameter InconsistencyN/AN/A0%Oct 28, 2026
976-1000 of 418435