The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-111053: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium0%Oct 19, 2026
CVE-2026-107744: Missing Authorization6.5 MediumN/A0%Oct 17, 2026
CVE-2026-59970: Server-Side Request Forgery (SSRF)7.7 HighN/A0%Oct 16, 2026
CVE-2026-105664: Observable Response Discrepancy5.3 Medium6.9 Medium0%Oct 16, 2026
CVE-2026-58395: Improper Neutralization of Data within XPath Expressions4.3 MediumN/A0%Oct 15, 2026
CVE-2026-53582: XML Injection (aka Blind XPath Injection)7.1 HighN/A1%Oct 15, 2026
CVE-2026-110310: Observable Response Discrepancy5.3 Medium6.0 Medium1%Oct 14, 2026
CVE-2026-93635: Improper Neutralization of Special Elements used in an LDAP Query5.3 MediumN/A0%Oct 14, 2026
CVE-2026-103907: Missing Authorization6.5 MediumN/A0%Oct 14, 2026
CVE-2026-85345: Server-Side Request Forgery (SSRF)4.1 MediumN/A0%Oct 14, 2026
CVE-2026-88834: Observable Discrepancy3.7 LowN/A0%Oct 13, 2026
CVE-2026-109677: Out-of-bounds Read6.5 Medium7.1 High0%Oct 13, 2026
CVE-2026-53997: Weak Password Recovery Mechanism for Forgotten Password7.4 High9.1 Critical0%Oct 12, 2026
CVE-2026-109341: Exposure of Sensitive Information to an Unauthorized Actor7.1 High7.1 High0%Oct 12, 2026
CVE-2026-109303: Authorization Bypass Through User-Controlled Key4.3 Medium5.3 Medium0%Oct 12, 2026
CVE-2026-105331: Untrusted Search PathN/A5.2 Medium0%Oct 8, 2026
CVE-2026-107449: Server-Side Request Forgery (SSRF)3.4 LowN/A0%Oct 8, 2026
CVE-2026-77178: Out-of-bounds Write9.1 CriticalN/A0%Oct 6, 2026
CVE-2026-104956: Improper Neutralization of Special Elements in Data Query Logic5.3 MediumN/A0%Oct 5, 2026
CVE-2026-104872: Insertion of Sensitive Information into Log File5.8 MediumN/A0%Oct 2, 2026
CVE-2026-104460: Improper Neutralization of Special Elements used in an SQL Command7.5 High8.7 High0%Oct 2, 2026
CVE-2026-63567: Observable Discrepancy7.5 High8.2 High0%Oct 2, 2026
CVE-2026-103253: Improper Neutralization of Special Elements used in an SQL Command8.7 High7.0 High0%Oct 1, 2026
CVE-2026-100698: Server-Side Request Forgery (SSRF)5.8 Medium6.9 Medium0%Sep 26, 2026
CVE-2026-100696: Server-Side Request Forgery (SSRF)5.8 Medium6.9 Medium0%Sep 26, 2026
1101-1125 of 13409
‹›