The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116687: Improper Neutralization of Input During Web Page Generation3.1 LowN/AN/AOct 27, 2026
CVE-2026-116686: Server-Side Request Forgery (SSRF)6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116685: Exposure of Sensitive Information to an Unauthorized Actor5.9 MediumN/AN/AOct 27, 2026
CVE-2026-116684: Incorrect Authorization6.8 MediumN/AN/AOct 27, 2026
CVE-2026-112355: Missing Authorization7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-112352: Reliance on Cookies without Validation and Integrity Checking9.1 Critical9.1 CriticalN/AOct 27, 2026
CVE-2026-112351: Improper Neutralization of Special Elements used in an OS Command8.8 High8.7 HighN/AOct 27, 2026
CVE-2026-112350: Improper Limitation of a Pathname to a Restricted Directory7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-103995: Inconsistent Interpretation of HTTP RequestsN/A2.0 LowN/AOct 27, 2026
CVE-2026-118180: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118179: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118178: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118177: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118176: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118175: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118174: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118173: Improper Input ValidationN/A6.1 MediumN/AOct 27, 2026
CVE-2026-118172: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118171: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-118170: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-116683: Insufficiently Protected CredentialsN/A7.1 HighN/AOct 27, 2026
CVE-2026-115413: Origin Validation Error7.8 High7.3 HighN/AOct 27, 2026
CVE-2026-88812: Double Free7.8 HighN/AN/AOct 27, 2026
CVE-2026-87086: Unchecked Return Value to NULL Pointer Dereference7.5 HighN/AN/AOct 27, 2026
CVE-2026-87085: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/AN/AOct 27, 2026
976-1000 of 416436