The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-119052: Uncaught Exception7.5 High8.7 High1%Oct 29, 2026
CVE-2026-119051: Allocation of Resources Without Limits or Throttling5.9 Medium8.2 High0%Oct 29, 2026
CVE-2026-119050: Use of Externally-Controlled Input to Select Classes or Code8.1 High9.2 Critical0%Oct 29, 2026
CVE-2026-119049: Authorization Bypass Through User-Controlled Key7.6 High7.2 High0%Oct 29, 2026
CVE-2026-119048: Authorization Bypass Through User-Controlled Key4.2 Medium2.3 Low0%Oct 29, 2026
CVE-2026-118425: URL Redirection to Untrusted Site6.8 MediumN/A0%Oct 29, 2026
CVE-2026-116857: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-116402: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)5.3 MediumN/A0%Oct 29, 2026
CVE-2026-116399: Cross-Site Request Forgery (CSRF)8.8 HighN/A0%Oct 29, 2026
CVE-2026-113697: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-113696: Improper AuthorizationN/A5.3 Medium0%Oct 29, 2026
CVE-2026-113695: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-113694: Improper AuthorizationN/A5.3 Medium0%Oct 29, 2026
CVE-2026-113693: Exposure of Sensitive Information to an Unauthorized ActorN/A5.3 Medium0%Oct 29, 2026
CVE-2026-113692: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium0%Oct 29, 2026
CVE-2026-113691: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 29, 2026
CVE-2019-25781: Inefficient Algorithmic Complexity7.5 High8.7 High0%Oct 29, 2026
CVE-2026-93011: Out-of-bounds Write5.3 MediumN/A1%Oct 29, 2026
CVE-2026-93008: Insufficient Verification of Data Authenticity6.8 MediumN/A0%Oct 29, 2026
CVE-2026-93007: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 29, 2026
CVE-2026-93006: Operation on a Resource after Expiration or Release6.8 MediumN/A0%Oct 29, 2026
CVE-2026-56056: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-52709: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-49142: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 29, 2026
CVE-2026-48196: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
1151-1175 of 422050