The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107028: Undefined Security Weakness9.1 CriticalN/AN/AOct 29, 2026
CVE-2026-107027: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-107026: Incorrect Permission Assignment for Critical Resource7.5 HighN/AN/AOct 29, 2026
CVE-2026-107025: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2026-106036: Improper Certificate ValidationN/A6.9 MediumN/AOct 29, 2026
CVE-2026-104339: Improper Control of Generation of Code9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104331: Server-Side Request Forgery (SSRF)5.4 MediumN/AN/AOct 29, 2026
CVE-2026-104328: Improper Control of Generation of Code8.8 HighN/AN/AOct 29, 2026
CVE-2026-104324: Deserialization of Untrusted Data8.8 HighN/AN/AOct 29, 2026
CVE-2026-104317: Deserialization of Untrusted Data9.8 CriticalN/AN/AOct 29, 2026
CVE-2026-104316: Improper Authorization6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104315: Server-Side Request Forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104314: Insufficiently Protected Credentials6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104312: Improper Limitation of a Pathname to a Restricted Directory6.8 MediumN/AN/AOct 29, 2026
CVE-2026-104310: Server-Side Request Forgery (SSRF)4.3 MediumN/AN/AOct 29, 2026
CVE-2026-104309: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/AN/AOct 29, 2026
CVE-2026-104308: Improper Neutralization of Special Elements used in an OS Command4.3 MediumN/AN/AOct 29, 2026
CVE-2026-103092: Improper Access Control8.8 HighN/AN/AOct 29, 2026
CVE-2026-102590: Server-Side Request Forgery (SSRF)7.7 HighN/AN/AOct 29, 2026
CVE-2026-101288: Improper Control of Generation of Code8.8 HighN/AN/AOct 29, 2026
CVE-2025-13050: Incorrect Authorization5.4 MediumN/AN/AOct 29, 2026
CVE-2026-88078: Microsoft Microsoft Edge (Chromium-based): Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…4.3 MediumN/AN/AOct 29, 2026
CVE-2026-88077: Microsoft Microsoft Edge (Chromium-based): Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96196: Microsoft Microsoft Edge (Chromium-based): Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…8.8 HighN/AN/AOct 29, 2026
CVE-2026-96187: Microsoft Microsoft Edge (Chromium-based): Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized…7.4 HighN/AN/AOct 29, 2026
1051-1075 of 415097