The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-79821: Improper Input Validation8.2 HighN/A0%Oct 15, 2026
CVE-2026-76668: Improper Handling of Overlap Between Protected Memory Ranges6.3 MediumN/A0%Oct 15, 2026
CVE-2026-74920: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Oct 15, 2026
CVE-2026-58100: Concurrent Execution using Shared Resource with Improper SynchronizationN/AN/A0%Oct 15, 2026
CVE-2026-58099: Concurrent Execution using Shared Resource with Improper SynchronizationN/AN/A0%Oct 15, 2026
CVE-2026-58098: Out-of-bounds Write8.4 HighN/A0%Oct 15, 2026
CVE-2026-41544: Improper Limitation of a Pathname to a Restricted DirectoryN/A8.7 High0%Oct 15, 2026
CVE-2026-39993: Relative Path TraversalN/A8.7 High0%Oct 15, 2026
CVE-2026-24723: NULL Pointer Dereference6.5 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-24722: NULL Pointer Dereference6.5 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-24721: NULL Pointer Dereference6.5 Medium5.3 Medium0%Oct 15, 2026
CVE-2026-24718: Improper Limitation of a Pathname to a Restricted DirectoryN/A5.3 Medium0%Oct 15, 2026
CVE-2026-24715: Observable Timing DiscrepancyN/A5.3 Medium0%Oct 15, 2026
CVE-2026-22896: Improper Neutralization of Input During Web Page GenerationN/A6.2 Medium0%Oct 15, 2026
CVE-2026-19377: Improper Certificate ValidationN/A6.0 Medium0%Oct 15, 2026
CVE-2026-11905: Missing Authorization4.3 MediumN/A0%Oct 15, 2026
CVE-2026-110934: Improper Validation of Array Index4.4 MediumN/A0%Oct 15, 2026
CVE-2026-110933: Uncaught Exception4.4 MediumN/A0%Oct 15, 2026
CVE-2026-109145: Improper Privilege Management9.8 CriticalN/A0%Oct 15, 2026
CVE-2026-106031: Improper Access Control6.5 MediumN/A0%Oct 15, 2026
CVE-2026-104643: Missing Authorization4.2 MediumN/A0%Oct 15, 2026
CVE-2026-103324: Insufficient Verification of Data Authenticity5.3 MediumN/A0%Oct 15, 2026
CVE-2026-103304: Missing Authorization5.3 MediumN/A0%Oct 15, 2026
CVE-2026-101308: Time-of-check Time-of-use (TOCTOU) Race Condition5.5 MediumN/A0%Oct 15, 2026
CVE-2026-101307: Heap-based Buffer Overflow6.5 Medium8.2 High0%Oct 15, 2026
1151-1175 of 406803
‹›