The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-47168: Deserialization of Untrusted Data9.1 CriticalN/A0%Oct 15, 2026
CVE-2026-46708: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 15, 2026
CVE-2026-46694: Missing Authorization6.5 MediumN/A0%Oct 15, 2026
CVE-2026-46691: Missing Authorization6.5 MediumN/A0%Oct 15, 2026
CVE-2026-110957: Improper Neutralization of Special Elements used in an OS Command10.0 Critical9.3 Critical3%Oct 15, 2026
CVE-2026-110936: Uncontrolled Search Path Element6.7 Medium8.4 High0%Oct 15, 2026
CVE-2026-110746: Improper Limitation of a Pathname to a Restricted Directory7.8 HighN/A0%Oct 15, 2026
CVE-2026-109413: Uncontrolled RecursionN/A8.7 High1%Oct 15, 2026
CVE-2026-108116: Improper Neutralization of Special Elements in Output Used by a Downstream Component7.5 HighN/A0%Oct 15, 2026
CVE-2026-108082: Inefficient Regular Expression ComplexityN/A8.7 High0%Oct 15, 2026
CVE-2026-106153: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106151: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106150: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106149: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Oct 15, 2026
CVE-2026-104586: Undefined Security WeaknessN/AN/A1%Oct 15, 2026
CVE-2026-103509: Insufficient Granularity of Access ControlN/A8.5 High0%Oct 15, 2026
CVE-2026-103508: Relative Path TraversalN/A7.3 High0%Oct 15, 2026
CVE-2026-93649: Download of Code Without Integrity Check7.5 HighN/A0%Oct 15, 2026
CVE-2026-110927: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110924: Incomplete Cleanup4.8 MediumN/A0%Oct 15, 2026
CVE-2026-106163: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6.5 MediumN/A0%Oct 15, 2026
CVE-2026-106162: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.7 MediumN/A0%Oct 15, 2026
CVE-2026-106161: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106160: Improperly Controlled Modification of Object Prototype Attributes5.4 MediumN/A0%Oct 15, 2026
CVE-2026-106159: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)4.7 MediumN/A0%Oct 15, 2026
1001-1025 of 406803
‹›