The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-102815: Improper Neutralization of Special Elements used in an OS CommandN/A6.9 Medium1%Oct 27, 2026
CVE-2026-102814: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High0%Oct 27, 2026
CVE-2026-102813: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)N/A6.1 Medium0%Oct 27, 2026
CVE-2026-102812: Use of Hard-coded Cryptographic KeyN/A6.9 Medium0%Oct 27, 2026
CVE-2026-87897: Server-Side Request Forgery (SSRF)4.6 MediumN/A0%Oct 27, 2026
CVE-2026-82986: Improper Access Control4.6 MediumN/A0%Oct 27, 2026
CVE-2026-82984: Improper Access Control4.3 MediumN/A0%Oct 27, 2026
CVE-2026-82983: Exposure of Sensitive Information to an Unauthorized Actor3.3 LowN/A0%Oct 27, 2026
CVE-2026-77173: Improper Access Control4.3 MediumN/A0%Oct 27, 2026
CVE-2026-77172: Improper Privilege Management5.3 MediumN/A0%Oct 27, 2026
CVE-2026-77171: Improper Access Control3.5 LowN/A0%Oct 27, 2026
CVE-2026-77167: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 27, 2026
CVE-2026-67400: Improper Access Control3.5 LowN/A0%Oct 27, 2026
CVE-2026-57201: Out-of-bounds Write7.5 HighN/A1%Oct 27, 2026
CVE-2026-57198: Heap-based Buffer OverflowN/A2.3 Low1%Oct 27, 2026
CVE-2026-57197: Heap-based Buffer OverflowN/A7.7 High1%Oct 27, 2026
CVE-2026-57194: Out-of-bounds Write5.9 MediumN/A0%Oct 27, 2026
CVE-2026-57189: Out-of-bounds WriteN/A2.3 Low1%Oct 27, 2026
CVE-2026-57185: Buffer Over-read6.5 MediumN/A0%Oct 27, 2026
CVE-2026-54462: Allocation of Resources Without Limits or Throttling6.5 MediumN/A0%Oct 27, 2026
CVE-2026-48380: Out-of-bounds Read5.5 MediumN/A0%Oct 27, 2026
CVE-2026-48379: Stack-based Buffer Overflow7.8 HighN/A0%Oct 27, 2026
CVE-2026-48360: Improper Control of Generation of Code9.6 CriticalN/A0%Oct 27, 2026
CVE-2026-117514: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
CVE-2026-117513: Improper Neutralization of Special Elements used in an SQL Command7.3 High5.5 Medium0%Oct 27, 2026
1151-1175 of 538495