The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-116680: Server-Side Request Forgery (SSRF)6.4 MediumN/A0%Oct 27, 2026
CVE-2026-116679: Incorrect Authorization5.4 MediumN/A0%Oct 27, 2026
CVE-2026-116678: Server-Side Request Forgery (SSRF)5.8 MediumN/A0%Oct 27, 2026
CVE-2026-116677: Missing AuthorizationN/A5.3 Medium0%Oct 27, 2026
CVE-2026-116676: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A0%Oct 27, 2026
CVE-2026-116662: Improper Handling of Highly Compressed Data (Data Amplification)7.5 HighN/A0%Oct 27, 2026
CVE-2026-116660: Missing Authorization4.3 MediumN/A0%Oct 27, 2026
CVE-2026-116659: Allocation of Resources Without Limits or Throttling4.3 MediumN/A0%Oct 27, 2026
CVE-2026-116658: NULL Pointer Dereference6.5 MediumN/A0%Oct 27, 2026
CVE-2026-116657: Allocation of Resources Without Limits or Throttling5.3 MediumN/A0%Oct 27, 2026
CVE-2026-116656: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 27, 2026
CVE-2026-116649: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/A0%Oct 27, 2026
CVE-2026-116647: Improper Neutralization of Formula Elements in a CSV File7.1 HighN/A0%Oct 27, 2026
CVE-2026-111054: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-108333: Use After Free2.5 LowN/A0%Oct 27, 2026
CVE-2026-108332: Improper Link Resolution Before File Access6.3 MediumN/A0%Oct 27, 2026
CVE-2026-108331: Uncontrolled Recursion3.3 LowN/A0%Oct 27, 2026
CVE-2026-108330: Out-of-bounds Read3.6 LowN/A0%Oct 27, 2026
CVE-2026-108329: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Oct 27, 2026
CVE-2026-108328: Insertion of Sensitive Information into Log File4.2 MediumN/A0%Oct 27, 2026
CVE-2026-108326: Improper Certificate Validation6.5 MediumN/A0%Oct 27, 2026
CVE-2026-108325: Insertion of Sensitive Information into Log File6.6 MediumN/A0%Oct 27, 2026
CVE-2026-108316: Generation of Error Message Containing Sensitive Information4.3 MediumN/A0%Oct 27, 2026
CVE-2026-108313: Improper Handling of Case Sensitivity6.6 MediumN/A0%Oct 27, 2026
CVE-2026-108311: Insufficient Logging2.7 LowN/A0%Oct 27, 2026
1051-1075 of 541914