The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-107671: Authentication Bypass Using an Alternate Path or ChannelN/A8.5 HighN/AOct 27, 2026
CVE-2026-106078: Improper Verification of Cryptographic SignatureN/A6.9 MediumN/AOct 27, 2026
CVE-2026-106077: Incorrect AuthorizationN/A8.3 HighN/AOct 27, 2026
CVE-2026-106076: Improper Neutralization of Special Elements used in an SQL CommandN/A9.0 CriticalN/AOct 27, 2026
CVE-2026-105781: Improper Neutralization of Special Elements used in an SQL Command10.0 CriticalN/AN/AOct 27, 2026
CVE-2026-105780: Incorrect Authorization9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105779: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-105489: Improper Neutralization of Special Elements used in an SQL Command9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-105477: Untrusted Search PathN/A7.3 HighN/AOct 27, 2026
CVE-2026-104354: Improper Neutralization of Special Elements used in an SQL Command9.1 CriticalN/AN/AOct 27, 2026
CVE-2026-104353: Improper Neutralization of Special Elements used in an OS Command9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104351: Improper Control of Generation of Code9.9 CriticalN/AN/AOct 27, 2026
CVE-2026-104350: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/AN/AOct 27, 2026
CVE-2026-104349: Uncontrolled Search Path Element7.3 HighN/AN/AOct 27, 2026
CVE-2026-102638: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/AOct 27, 2026
CVE-2026-102637: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/AOct 27, 2026
CVE-2026-102636: Improper Neutralization of Input During Web Page Generation7.1 HighN/AN/AOct 27, 2026
CVE-2025-64394: Insecure Operation on Windows Junction / Mount PointN/A4.3 MediumN/AOct 27, 2026
CVE-2026-93866: Integer Overflow or WraparoundN/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93865: Missing Authentication for Critical FunctionN/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93864: Improper Limitation of a Pathname to a Restricted DirectoryN/A7.1 HighN/AOct 27, 2026
CVE-2026-93857: Buffer Copy without Checking Size of InputN/A9.2 CriticalN/AOct 27, 2026
CVE-2026-93434: Improper Input ValidationN/A8.7 HighN/AOct 27, 2026
CVE-2026-92377: Incorrect Permission Assignment for Critical Resource7.8 HighN/AN/AOct 27, 2026
CVE-2026-92376: Improper Authentication7.8 HighN/AN/AOct 27, 2026
1076-1100 of 416436