The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-108331: Uncontrolled Recursion3.3 LowN/AN/AOct 27, 2026
CVE-2026-108330: Out-of-bounds Read3.6 LowN/AN/AOct 27, 2026
CVE-2026-108329: Improper Neutralization of Special Elements used in a Command8.8 HighN/AN/AOct 27, 2026
CVE-2026-108328: Insertion of Sensitive Information into Log File4.2 MediumN/AN/AOct 27, 2026
CVE-2026-108326: Improper Certificate Validation6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108325: Insertion of Sensitive Information into Log File6.6 MediumN/AN/AOct 27, 2026
CVE-2026-108316: Generation of Error Message Containing Sensitive Information4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108313: Improper Handling of Case Sensitivity6.6 MediumN/AN/AOct 27, 2026
CVE-2026-108311: Insufficient Logging2.7 LowN/AN/AOct 27, 2026
CVE-2026-108310: Allocation of Resources Without Limits or Throttling5.3 MediumN/AN/AOct 27, 2026
CVE-2026-108309: Allocation of Resources Without Limits or Throttling5.5 MediumN/AN/AOct 27, 2026
CVE-2026-108308: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108307: Heap-based Buffer Overflow7.8 HighN/AN/AOct 27, 2026
CVE-2026-108306: Improper Link Resolution Before File Access7.8 HighN/AN/AOct 27, 2026
CVE-2026-108305: Improper Link Resolution Before File Access7.8 HighN/AN/AOct 27, 2026
CVE-2026-108304: Improper Link Resolution Before File Access7.8 HighN/AN/AOct 27, 2026
CVE-2026-108303: Improper Neutralization of Special Elements used in a Command8.8 HighN/AN/AOct 27, 2026
CVE-2026-108302: Incorrect Authorization4.3 MediumN/AN/AOct 27, 2026
CVE-2026-108301: Missing Authorization6.0 MediumN/AN/AOct 27, 2026
CVE-2026-102816: Missing Authentication for Critical FunctionN/A5.3 MediumN/AOct 27, 2026
CVE-2026-102815: Improper Neutralization of Special Elements used in an OS CommandN/A6.9 MediumN/AOct 27, 2026
CVE-2026-102814: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 HighN/AOct 27, 2026
CVE-2026-102813: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)N/A6.1 MediumN/AOct 27, 2026
CVE-2026-102812: Use of Hard-coded Cryptographic KeyN/A6.9 MediumN/AOct 27, 2026
CVE-2026-87897: Server-Side Request Forgery (SSRF)4.6 MediumN/AN/AOct 27, 2026
1026-1050 of 416436