The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-108498: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 15, 2026
CVE-2026-108497: Improper Neutralization of Special Elements used in an SQL Command9.3 CriticalN/A0%Oct 15, 2026
CVE-2026-108491: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 15, 2026
CVE-2026-79829: Improper Input Validation8.2 HighN/A0%Oct 15, 2026
CVE-2026-79828: Heap-based Buffer Overflow7.1 HighN/A0%Oct 15, 2026
CVE-2026-79827: Heap-based Buffer Overflow7.1 HighN/A0%Oct 15, 2026
CVE-2026-79826: Heap-based Buffer Overflow7.1 HighN/A0%Oct 15, 2026
CVE-2026-79825: Heap-based Buffer Overflow7.1 HighN/A0%Oct 15, 2026
CVE-2026-79824: Path Traversal: '\dir\..\filename'8.0 HighN/A0%Oct 15, 2026
CVE-2026-53882: Improper Link Resolution Before File AccessN/A8.7 High0%Oct 15, 2026
CVE-2026-50619: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.3 Critical0%Oct 15, 2026
CVE-2026-50612: UNIX Symbolic Link (Symlink) FollowingN/A9.4 Critical0%Oct 15, 2026
CVE-2026-47790: Improper Neutralization of Input During Web Page GenerationN/A6.3 Medium0%Oct 15, 2026
CVE-2026-47786: Improper Neutralization of Special Elements used in an OS CommandN/A9.3 Critical1%Oct 15, 2026
CVE-2026-44084: Authorization Bypass Through User-Controlled Key7.5 High8.7 High0%Oct 15, 2026
CVE-2026-41545: Relative Path TraversalN/A8.6 High1%Oct 15, 2026
CVE-2026-41541: UNIX Symbolic Link (Symlink) FollowingN/A5.3 Medium1%Oct 15, 2026
CVE-2026-39997: Missing Authentication for Critical FunctionN/A8.9 High0%Oct 15, 2026
CVE-2026-39991: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 15, 2026
CVE-2026-39989: Server-Side Request Forgery (SSRF)N/A5.3 Medium0%Oct 15, 2026
CVE-2026-34015: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium8.7 High0%Oct 15, 2026
CVE-2026-34014: Incorrect Permission Assignment for Critical ResourceN/A8.4 High0%Oct 15, 2026
CVE-2026-34009: Improper Isolation or CompartmentalizationN/A8.4 High0%Oct 15, 2026
CVE-2026-34008: Incorrect Permission Assignment for Critical ResourceN/A8.5 High0%Oct 15, 2026
CVE-2026-34007: Improper Neutralization of Special Elements used in an OS CommandN/A6.9 Medium2%Oct 15, 2026
1001-1025 of 406803
‹›