The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-109823: Exposure of Sensitive System Information to an Unauthorized Control SphereN/A2.3 Low0%Oct 27, 2026
CVE-2026-107672: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Oct 27, 2026
CVE-2026-107458: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-104381: Authentication Bypass by Capture-replayN/A6.0 Medium0%Oct 27, 2026
CVE-2026-104189: Missing Authentication for Critical Function7.5 HighN/A0%Oct 27, 2026
CVE-2026-103594: Stack-based Buffer OverflowN/A9.5 Critical0%Oct 27, 2026
CVE-2026-103593: Stack-based Buffer OverflowN/A7.1 High0%Oct 27, 2026
CVE-2026-93862: Out-of-bounds ReadN/A7.2 High0%Oct 27, 2026
CVE-2026-78845: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-117604: Exposure of Sensitive Information to an Unauthorized Actor7.5 High8.7 High0%Oct 27, 2026
CVE-2026-117507: Concurrent Execution using Shared Resource with Improper Synchronization5.4 Medium5.3 Medium0%Oct 27, 2026
CVE-2026-117506: Uncontrolled Resource Consumption4.3 Medium5.3 Medium0%Oct 27, 2026
CVE-2026-117505: Uncontrolled Resource Consumption4.3 Medium5.3 Medium0%Oct 27, 2026
CVE-2026-105987: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 27, 2026
CVE-2026-94347: Process Control7.2 HighN/A0%Oct 27, 2026
CVE-2026-94346: Path Traversal: 'dir\..\..\filename'7.2 HighN/A1%Oct 27, 2026
CVE-2026-90727: Relative Path Traversal3.8 LowN/A0%Oct 27, 2026
CVE-2026-90726: Path Traversal: '..\filedir'6.0 MediumN/A0%Oct 27, 2026
CVE-2026-16307: Authorization Bypass Through User-Controlled Key4.3 MediumN/A0%Oct 27, 2026
CVE-2026-12887: Undefined Security WeaknessN/A5.1 Medium0%Oct 27, 2026
CVE-2026-118027: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-118026: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-118025: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-118024: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
CVE-2026-118023: Undefined Security WeaknessN/AN/A0%Oct 27, 2026
1176-1200 of 408356