The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116662: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/AN/AOct 27, 2026
CVE-2026-116660: Missing Authorization4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116659: Allocation of Resources Without Limits or Throttling4.3 MediumN/AN/AOct 27, 2026
CVE-2026-116658: NULL Pointer Dereference6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116657: Allocation of Resources Without Limits or Throttling5.3 MediumN/AN/AOct 27, 2026
CVE-2026-116656: Uncontrolled Resource Consumption7.5 HighN/AN/AOct 27, 2026
CVE-2026-116649: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/AN/AOct 27, 2026
CVE-2026-116647: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/AN/AOct 27, 2026
CVE-2026-111054: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-108333: Use After Free2.5 LowN/AN/AOct 27, 2026
CVE-2026-108332: Improper Link Resolution Before File Access6.3 MediumN/AN/AOct 27, 2026
CVE-2026-108331: Uncontrolled Recursion3.3 LowN/AN/AOct 27, 2026
CVE-2026-108330: Out-of-bounds Read3.6 LowN/AN/AOct 27, 2026
CVE-2026-108329: Improper Neutralization of Special Elements used in a Command8.8 HighN/AN/AOct 27, 2026
CVE-2026-108328: Insertion of Sensitive Information into Log File4.2 MediumN/AN/AOct 27, 2026
CVE-2026-108326: Improper Certificate Validation6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108325: Insertion of Sensitive Information into Log File6.6 MediumN/AN/AOct 27, 2026
CVE-2026-108316: Generation of Error Message Containing Sensitive Information4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108313: Improper Handling of Case Sensitivity6.6 MediumN/AN/AOct 27, 2026
CVE-2026-108311: Insufficient Logging2.7 LowN/AN/AOct 27, 2026
CVE-2026-108310: Allocation of Resources Without Limits or Throttling5.3 MediumN/AN/AOct 27, 2026
CVE-2026-108309: Allocation of Resources Without Limits or Throttling5.5 MediumN/AN/AOct 27, 2026
CVE-2026-108308: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108307: Heap-based Buffer Overflow7.8 HighN/AN/AOct 27, 2026
CVE-2026-108306: Improper Link Resolution Before File Access7.8 HighN/AN/AOct 27, 2026
1001-1025 of 416436