The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-116674: Improperly Controlled Modification of Object Prototype Attributes6.5 MediumN/AN/AOct 27, 2026
CVE-2026-116673: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/AN/AOct 27, 2026
CVE-2026-116672: Authorization Bypass Through User-Controlled Key8.8 HighN/AN/AOct 27, 2026
CVE-2026-114598: Access of Resource Using Incompatible Type7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-114597: Improper Handling of Length Parameter Inconsistency7.5 High8.7 HighN/AOct 27, 2026
CVE-2026-114596: Integer Overflow or Wraparound8.2 High8.8 HighN/AOct 27, 2026
CVE-2026-114595: Integer Overflow or Wraparound9.8 Critical9.3 CriticalN/AOct 27, 2026
CVE-2026-113775: Exposed Dangerous Method or Function7.8 HighN/AN/AOct 27, 2026
CVE-2026-112353: Improper Neutralization of Input During Web Page Generation8.2 High6.2 MediumN/AOct 27, 2026
CVE-2026-109090: Heap-based Buffer Overflow7.5 HighN/AN/AOct 27, 2026
CVE-2026-109089: Heap-based Buffer Overflow7.5 HighN/AN/AOct 27, 2026
CVE-2026-109088: Loop with Unreachable Exit Condition6.5 MediumN/AN/AOct 27, 2026
CVE-2026-108142: Not Failing SecurelyN/A9.1 CriticalN/AOct 27, 2026
CVE-2026-108141: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 MediumN/AOct 27, 2026
CVE-2026-108140: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.9 MediumN/AOct 27, 2026
CVE-2026-108015: Use of a Broken or Risky Cryptographic AlgorithmN/A9.1 CriticalN/AOct 27, 2026
CVE-2026-108014: Use of a Broken or Risky Cryptographic AlgorithmN/A9.1 CriticalN/AOct 27, 2026
CVE-2026-107671: Authentication Bypass Using an Alternate Path or ChannelN/A8.5 HighN/AOct 27, 2026
CVE-2026-106078: Improper Verification of Cryptographic SignatureN/A6.9 MediumN/AOct 27, 2026
CVE-2026-106077: Incorrect AuthorizationN/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Improper Neutralization of Special Elements used in an SQL CommandN/A9.0 CriticalN/AOct 27, 2026
CVE-2026-105781: Improper Neutralization of Special Elements used in an SQL Command10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-105780: Incorrect Authorization9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105779: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-105489: Improper Neutralization of Special Elements used in an SQL Command9.9 CriticalN/AN/AOct 27, 2026
1076-1100 of 416436