The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-88812: Double Free7.8 HighN/A0%Oct 27, 2026
CVE-2026-87086: Unchecked Return Value to NULL Pointer Dereference7.5 HighN/A0%Oct 27, 2026
CVE-2026-87085: Improper Neutralization of Special Elements used in an SQL Command6.3 MediumN/A0%Oct 27, 2026
CVE-2026-57202: Privilege Defined With Unsafe Actions8.1 HighN/A0%Oct 27, 2026
CVE-2026-57188: Out-of-bounds WriteN/A7.1 High1%Oct 27, 2026
CVE-2026-16491: Missing Authorization6.5 MediumN/A0%Oct 27, 2026
CVE-2026-118132: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-118131: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-117526: Improper Control of Generation of Code5.3 Medium1.9 Low0%Oct 27, 2026
CVE-2026-117516: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-117515: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-116682: Improper Limitation of a Pathname to a Restricted Directory8.6 HighN/A1%Oct 27, 2026
CVE-2026-116680: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Oct 27, 2026
CVE-2026-116679: Incorrect Authorization5.4 MediumN/A0%Oct 27, 2026
CVE-2026-116678: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Oct 27, 2026
CVE-2026-116677: Missing AuthorizationN/A5.3 Medium0%Oct 27, 2026
CVE-2026-116676: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Oct 27, 2026
CVE-2026-116662: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Oct 27, 2026
CVE-2026-116660: Missing Authorization4.3 MediumN/A0%Oct 27, 2026
CVE-2026-116659: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Oct 27, 2026
CVE-2026-116658: NULL Pointer Dereference6.5 MediumN/A0%Oct 27, 2026
CVE-2026-116657: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 27, 2026
CVE-2026-116656: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 27, 2026
CVE-2026-116649: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/A0%Oct 27, 2026
CVE-2026-116647: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/A0%Oct 27, 2026
1001-1025 of 417776