The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-76182: Improper Neutralization of Special Elements in Output Used by a Downstream ComponentN/A6.9 Medium0%Oct 15, 2026
CVE-2026-75559: Insertion of Sensitive Information Into Sent Data5.3 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-72528: URL Redirection to Untrusted Site4.3 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-63315: Plaintext Storage of a PasswordN/A8.2 High0%Oct 15, 2026
CVE-2026-63314: Improper Neutralization of Special Elements used in an SQL CommandN/A8.7 High0%Oct 15, 2026
CVE-2026-35088: Inadequate Encryption StrengthN/A8.2 High0%Oct 15, 2026
CVE-2026-18661: Incorrect AuthorizationN/A8.8 High0%Oct 15, 2026
CVE-2026-16438: Incorrect Privilege AssignmentN/A9.4 Critical0%Oct 15, 2026
CVE-2026-16437: Weak Password Recovery Mechanism for Forgotten PasswordN/A7.1 High0%Oct 15, 2026
CVE-2026-16436: Weak Password Recovery Mechanism for Forgotten PasswordN/A9.2 Critical0%Oct 15, 2026
CVE-2026-109855: Uncaught Exception7.5 HighN/A0%Oct 15, 2026
CVE-2026-105271: Cleartext Storage of Sensitive Information4.3 Medium5.1 Medium0%Oct 15, 2026
CVE-2026-104618: Incorrect Permission Assignment for Critical Resource6.2 Medium6.9 Medium0%Oct 15, 2026
CVE-2026-104617: Insufficiently Protected Credentials5.1 Medium5.9 Medium0%Oct 15, 2026
CVE-2026-103224: Undefined Security WeaknessN/A8.2 High0%Oct 15, 2026
CVE-2026-103223: Memory Allocation with Excessive Size ValueN/A8.2 High0%Oct 15, 2026
CVE-2026-102477: Improper Handling of Highly Compressed Data (Data Amplification)N/A8.7 High0%Oct 15, 2026
CVE-2026-102469: Deserialization of Untrusted DataN/A9.2 Critical0%Oct 15, 2026
CVE-2026-102466: Memory Allocation with Excessive Size ValueN/A8.2 High0%Oct 15, 2026
CVE-2026-102464: Allocation of Resources Without Limits or ThrottlingN/A8.2 High0%Oct 15, 2026
CVE-2026-102463: Memory Allocation with Excessive Size ValueN/A8.2 High0%Oct 15, 2026
CVE-2026-102462: Uncontrolled Resource ConsumptionN/A8.2 High0%Oct 15, 2026
CVE-2026-102461: Undefined Security WeaknessN/A8.7 High0%Oct 15, 2026
CVE-2026-101290: Out-of-bounds Read7.5 HighN/A0%Oct 15, 2026
CVE-2026-101287: Reliance on Cookies without Validation and Integrity CheckingN/A9.3 Critical0%Oct 15, 2026
1101-1125 of 406803
‹›