The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-112375: Missing AuthorizationN/AN/A0%Oct 28, 2026
CVE-2026-111551: Memory Allocation with Excessive Size ValueN/AN/A0%Oct 28, 2026
CVE-2026-111496: Integer Overflow or WraparoundN/AN/A0%Oct 28, 2026
CVE-2026-111115: Undefined Security WeaknessN/AN/A0%Oct 28, 2026
CVE-2026-111108: Allocation of Resources Without Limits or ThrottlingN/AN/A0%Oct 28, 2026
CVE-2026-111073: Improper Handling of Highly Compressed Data (Data Amplification)N/AN/A0%Oct 28, 2026
CVE-2026-110985: Insufficient Verification of Data AuthenticityN/AN/A0%Oct 28, 2026
CVE-2026-110952: Insufficient Verification of Data AuthenticityN/AN/A0%Oct 28, 2026
CVE-2026-106079: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Oct 28, 2026
CVE-2026-103506: Improper AuthorizationN/A8.9 High0%Oct 28, 2026
CVE-2026-103411: Integer Underflow (Wrap or Wraparound)7.1 HighN/A0%Oct 28, 2026
CVE-2026-103409: Missing Authentication for Critical Function9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-103408: Stack-based Buffer Overflow8.8 HighN/A0%Oct 28, 2026
CVE-2026-103407: Improper Limitation of a Pathname to a Restricted Directory8.8 HighN/A0%Oct 28, 2026
CVE-2026-103406: Improper Neutralization of Special Elements used in an OS Command9.8 CriticalN/A1%Oct 28, 2026
CVE-2026-103405: Improper Neutralization of Special Elements in Output Used by a Downstream Component5.8 MediumN/A0%Oct 28, 2026
CVE-2026-103404: Incorrect Permission Assignment for Critical Resource6.8 MediumN/A0%Oct 28, 2026
CVE-2026-103403: Improper Neutralization of Special Elements used in an OS Command8.8 HighN/A1%Oct 28, 2026
CVE-2026-103402: Insufficient Verification of Data Authenticity8.8 HighN/A0%Oct 28, 2026
CVE-2026-103401: Improper Link Resolution Before File Access8.8 HighN/A0%Oct 28, 2026
CVE-2026-103393: Out-of-bounds Read4.3 MediumN/A0%Oct 28, 2026
CVE-2026-103392: Out-of-bounds Write4.8 MediumN/A0%Oct 28, 2026
CVE-2026-103391: Out-of-bounds Write5.3 MediumN/A0%Oct 28, 2026
CVE-2026-100105: Incorrect Authorization7.7 HighN/A0%Oct 28, 2026
CVE-2026-103410: Integer Overflow or Wraparound7.5 HighN/A0%Oct 28, 2026
1076-1100 of 414682