The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-107036: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107035: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107034: Undefined Security Weakness9.1 CriticalN/A0%Oct 29, 2026
CVE-2026-107033: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107032: Improper Export of Android Application Components9.1 CriticalN/A0%Oct 29, 2026
CVE-2026-107030: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107029: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107028: Undefined Security Weakness9.1 CriticalN/A0%Oct 29, 2026
CVE-2026-107027: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-107026: Incorrect Permission Assignment for Critical Resource7.5 HighN/A0%Oct 29, 2026
CVE-2026-107025: Undefined Security WeaknessN/AN/A0%Oct 29, 2026
CVE-2026-106036: Improper Certificate ValidationN/A6.9 Medium0%Oct 29, 2026
CVE-2026-104339: Improper Control of Generation of Code9.8 CriticalN/A1%Oct 29, 2026
CVE-2026-104331: Server-Side Request Forgery (SSRF)5.4 MediumN/A0%Oct 29, 2026
CVE-2026-104328: Improper Control of Generation of Code8.8 HighN/A1%Oct 29, 2026
CVE-2026-104324: Deserialization of Untrusted Data8.8 HighN/A1%Oct 29, 2026
CVE-2026-104317: Deserialization of Untrusted Data9.8 CriticalN/A1%Oct 29, 2026
CVE-2026-104316: Improper Authorization6.5 MediumN/A0%Oct 29, 2026
CVE-2026-104315: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Oct 29, 2026
CVE-2026-104314: Insufficiently Protected Credentials6.5 MediumN/A0%Oct 29, 2026
CVE-2026-104312: Improper Limitation of a Pathname to a Restricted Directory6.8 MediumN/A0%Oct 29, 2026
CVE-2026-104310: Server-Side Request Forgery (SSRF)4.3 MediumN/A0%Oct 29, 2026
CVE-2026-104309: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A1%Oct 29, 2026
CVE-2026-104308: Improper Neutralization of Special Elements used in an OS Command4.3 MediumN/A0%Oct 29, 2026
CVE-2026-103092: Improper Access Control8.8 HighN/A0%Oct 29, 2026
1051-1075 of 513140