The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-116078: Allocation of Resources Without Limits or ThrottlingN/A8.7 High0%Oct 28, 2026
CVE-2026-115968: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-115603: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 28, 2026
CVE-2026-115590: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-105420: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical1%Oct 28, 2026
CVE-2026-93516: Use After Free5.5 MediumN/A0%Oct 28, 2026
CVE-2026-93515: Use After FreeN/A6.8 Medium0%Oct 28, 2026
CVE-2026-67080: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Oct 28, 2026
CVE-2026-67079: Improper Restriction of Rendered UI Layers or Frames6.4 MediumN/A0%Oct 28, 2026
CVE-2026-67077: Server-Side Request Forgery (SSRF)4.2 MediumN/A0%Oct 28, 2026
CVE-2026-67074: Improper Control of Generation of Code9.1 CriticalN/A0%Oct 28, 2026
CVE-2026-67073: Unrestricted Upload of File with Dangerous Type8.6 HighN/A0%Oct 28, 2026
CVE-2026-55369: Improper Authentication6.5 MediumN/A0%Oct 28, 2026
CVE-2026-21830: Improper Input Validation3.7 LowN/A0%Oct 28, 2026
CVE-2026-118040: Improper Verification of Cryptographic Signature7.5 HighN/A0%Oct 28, 2026
CVE-2026-118039: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Oct 28, 2026
CVE-2026-118038: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Oct 28, 2026
CVE-2026-118037: Uncontrolled Recursion7.5 HighN/A0%Oct 28, 2026
CVE-2026-118036: Uncontrolled Recursion7.5 HighN/A0%Oct 28, 2026
CVE-2026-118035: Uncontrolled Recursion7.5 HighN/A0%Oct 28, 2026
CVE-2026-116404: Missing Authorization6.5 MediumN/A0%Oct 28, 2026
CVE-2026-116393: Missing Authorization7.5 HighN/A0%Oct 28, 2026
CVE-2026-116392: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-116391: Deserialization of Untrusted Data8.8 HighN/A0%Oct 28, 2026
CVE-2026-115957: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 28, 2026
1001-1025 of 417361