The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-106972: Undefined Security WeaknessN/AN/A0%Oct 28, 2026
CVE-2026-106971: Undefined Security WeaknessN/AN/A0%Oct 28, 2026
Alma Linux: CVE-2026-93517: Important: xorg-x11-server security update (Multiple Advisories)N/A8.5 High0%Oct 28, 2026
CVE-2026-59959: Divide By ZeroN/A4.8 Medium0%Oct 28, 2026
CVE-2026-59185: Authorization Bypass Through User-Controlled Key8.5 HighN/A0%Oct 28, 2026
CVE-2026-59179: Improper Limitation of a Pathname to a Restricted Directory8.3 HighN/A0%Oct 28, 2026
CVE-2026-59177: Binding to an Unrestricted IP Address8.8 HighN/A1%Oct 28, 2026
CVE-2026-59176: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/A0%Oct 28, 2026
CVE-2026-59172: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/A0%Oct 28, 2026
CVE-2026-59164: Missing Authorization7.1 HighN/A0%Oct 28, 2026
CVE-2026-52729: Missing Authorization7.1 HighN/A0%Oct 28, 2026
CVE-2026-50541: Missing Authorization6.5 MediumN/A0%Oct 28, 2026
CVE-2026-116390: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-116389: Deserialization of Untrusted Data8.8 HighN/A0%Oct 28, 2026
CVE-2026-116078: Allocation of Resources Without Limits or ThrottlingN/A8.7 High0%Oct 28, 2026
CVE-2026-115968: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-115603: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 28, 2026
CVE-2026-115590: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-105420: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical1%Oct 28, 2026
CVE-2026-93516: Use After Free5.5 MediumN/A0%Oct 28, 2026
CVE-2026-93515: Use After FreeN/A6.8 Medium0%Oct 28, 2026
CVE-2026-67080: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Oct 28, 2026
CVE-2026-67079: Improper Restriction of Rendered UI Layers or Frames6.4 MediumN/A0%Oct 28, 2026
CVE-2026-67077: Server-Side Request Forgery (SSRF)4.2 MediumN/A0%Oct 28, 2026
CVE-2026-67074: Improper Control of Generation of Code9.1 CriticalN/A0%Oct 28, 2026
1051-1075 of 520238