The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-57198: Heap-based Buffer OverflowN/A2.3 Low1%Oct 27, 2026
CVE-2026-57197: Heap-based Buffer OverflowN/A7.7 High1%Oct 27, 2026
CVE-2026-57194: Out-of-bounds Write5.9 MediumN/A0%Oct 27, 2026
CVE-2026-57189: Out-of-bounds WriteN/A2.3 Low1%Oct 27, 2026
CVE-2026-57185: Buffer Over-read6.5 MediumN/A0%Oct 27, 2026
CVE-2026-54462: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 27, 2026
CVE-2026-48380: Out-of-bounds Read5.5 MediumN/A0%Oct 27, 2026
CVE-2026-48379: Stack-based Buffer Overflow7.8 HighN/A0%Oct 27, 2026
CVE-2026-48360: Improper Control of Generation of Code9.6 CriticalN/A0%Oct 27, 2026
CVE-2026-117514: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-117513: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-117512: Unrestricted Upload of File with Dangerous Type7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-116675: Improper Neutralization of Input During Web Page GenerationN/A8.5 High0%Oct 27, 2026
CVE-2026-116674: Improperly Controlled Modification of Object Prototype Attributes6.5 MediumN/A0%Oct 27, 2026
CVE-2026-116673: Improper Limitation of a Pathname to a Restricted Directory3.3 LowN/A0%Oct 27, 2026
CVE-2026-116672: Authorization Bypass Through User-Controlled Key8.8 HighN/A0%Oct 27, 2026
CVE-2026-114598: Access of Resource Using Incompatible Type7.5 High8.7 High0%Oct 27, 2026
CVE-2026-114597: Improper Handling of Length Parameter Inconsistency7.5 High8.7 High0%Oct 27, 2026
CVE-2026-114596: Integer Overflow or Wraparound8.2 High8.8 High0%Oct 27, 2026
CVE-2026-114595: Integer Overflow or Wraparound9.8 Critical9.3 Critical1%Oct 27, 2026
CVE-2026-113775: Exposed Dangerous Method or Function7.8 HighN/A0%Oct 27, 2026
CVE-2026-112353: Improper Neutralization of Input During Web Page Generation8.2 High6.2 Medium0%Oct 27, 2026
CVE-2026-109090: Heap-based Buffer Overflow7.5 HighN/A0%Oct 27, 2026
CVE-2026-109089: Heap-based Buffer Overflow7.5 HighN/A0%Oct 27, 2026
CVE-2026-109088: Loop with Unreachable Exit Condition6.5 MediumN/A0%Oct 27, 2026
1101-1125 of 416553