The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-59176: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/A0%Oct 28, 2026
CVE-2026-59172: Inclusion of Functionality from Untrusted Control Sphere7.8 HighN/A0%Oct 28, 2026
CVE-2026-59164: Missing Authorization7.1 HighN/A0%Oct 28, 2026
CVE-2026-52729: Missing Authorization7.1 HighN/A0%Oct 28, 2026
CVE-2026-50541: Missing Authorization6.5 MediumN/A0%Oct 28, 2026
CVE-2026-116390: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-116389: Deserialization of Untrusted Data8.8 HighN/A0%Oct 28, 2026
CVE-2026-116078: Allocation of Resources Without Limits or ThrottlingN/A8.7 High0%Oct 28, 2026
CVE-2026-115968: Deserialization of Untrusted Data9.8 CriticalN/A0%Oct 28, 2026
CVE-2026-115603: Improper Neutralization of Special Elements used in an SQL Command8.5 HighN/A0%Oct 28, 2026
CVE-2026-115590: Deserialization of Untrusted Data7.2 HighN/A0%Oct 28, 2026
CVE-2026-105420: Improper Limitation of a Pathname to a Restricted DirectoryN/A9.4 Critical1%Oct 28, 2026
CVE-2026-93516: Use After Free5.5 MediumN/A0%Oct 28, 2026
CVE-2026-93515: Use After FreeN/A6.8 Medium0%Oct 28, 2026
CVE-2026-67080: Generation of Error Message Containing Sensitive Information6.5 MediumN/A0%Oct 28, 2026
CVE-2026-67079: Improper Restriction of Rendered UI Layers or Frames6.4 MediumN/A0%Oct 28, 2026
CVE-2026-67077: Server-Side Request Forgery (SSRF)4.2 MediumN/A0%Oct 28, 2026
CVE-2026-67074: Improper Control of Generation of Code9.1 CriticalN/A0%Oct 28, 2026
CVE-2026-67073: Unrestricted Upload of File with Dangerous Type8.6 HighN/A0%Oct 28, 2026
CVE-2026-55369: Improper Authentication6.5 MediumN/A0%Oct 28, 2026
CVE-2026-21830: Improper Input Validation3.7 LowN/A0%Oct 28, 2026
CVE-2026-118040: Improper Verification of Cryptographic Signature7.5 HighN/A0%Oct 28, 2026
CVE-2026-118039: Improper Restriction of XML External Entity Reference7.5 HighN/A0%Oct 28, 2026
CVE-2026-118038: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Oct 28, 2026
CVE-2026-118037: Uncontrolled Recursion7.5 HighN/A0%Oct 28, 2026
1126-1150 of 520238