The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-34006: Missing Authentication for Critical FunctionN/A9.3 Critical1%Oct 15, 2026
CVE-2026-26245: Improper Neutralization of Special Elements used in an SQL Command8.8 High7.1 High0%Oct 15, 2026
CVE-2026-26244: Improper Neutralization of Special Elements used in an SQL Command8.8 High7.1 High0%Oct 15, 2026
CVE-2026-26243: Improper Limitation of a Pathname to a Restricted DirectoryN/A7.2 High1%Oct 15, 2026
CVE-2026-19864: Cleartext Storage of Sensitive InformationN/A5.6 Medium0%Oct 15, 2026
CVE-2026-19863: Authentication Bypass Using an Alternate Path or ChannelN/A9.3 Critical1%Oct 15, 2026
CVE-2026-18662: Incorrect AuthorizationN/A6.9 Medium0%Oct 15, 2026
CVE-2026-18660: Improper Handling of Case SensitivityN/A8.8 High0%Oct 15, 2026
CVE-2026-18659: Incorrect AuthorizationN/A6.9 Medium0%Oct 15, 2026
CVE-2026-96614: Improper Authorization in Handler for Custom URL Scheme5.4 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-79823: Stack-based Buffer Overflow4.0 MediumN/A0%Oct 15, 2026
CVE-2026-77711: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High0%Oct 15, 2026
CVE-2026-76184: Exposure of Sensitive Information to an Unauthorized ActorN/A8.2 High0%Oct 15, 2026
CVE-2026-76182: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.9 Medium0%Oct 15, 2026
CVE-2026-75559: Insertion of Sensitive Information Into Sent Data5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-72528: URL Redirection to Untrusted Site4.3 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-63315: Plaintext Storage of a PasswordN/A8.2 High0%Oct 15, 2026
CVE-2026-63314: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Oct 15, 2026
CVE-2026-35088: Inadequate Encryption StrengthN/A8.2 High0%Oct 15, 2026
CVE-2026-18661: Incorrect AuthorizationN/A8.8 High0%Oct 15, 2026
CVE-2026-16438: Incorrect Privilege AssignmentN/A9.4 Critical0%Oct 15, 2026
CVE-2026-16437: Weak Password Recovery Mechanism for Forgotten PasswordN/A7.1 High0%Oct 15, 2026
CVE-2026-16436: Weak Password Recovery Mechanism for Forgotten PasswordN/A9.2 Critical0%Oct 15, 2026
CVE-2026-109855: Uncaught Exception7.5 HighN/A0%Oct 15, 2026
CVE-2026-105271: Cleartext Storage of Sensitive Information4.3 Medium5.1 Medium0%Oct 15, 2026
1026-1050 of 406803
‹›