The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118093: Missing Authorization5.3 MediumN/A0%Oct 29, 2026
CVE-2026-118087: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-113690: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-113689: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 29, 2026
CVE-2026-113688: Server-Side Request Forgery (SSRF)N/A5.3 Medium0%Oct 29, 2026
CVE-2026-93009: Out-of-bounds Read4.3 MediumN/A0%Oct 29, 2026
CVE-2026-93010: Missing Authorization4.3 MediumN/A0%Oct 29, 2026
CVE-2026-97860: Unquoted Search Path or Element6.7 Medium8.4 High0%Oct 29, 2026
CVE-2026-97854: Improper Neutralization of Special Elements used in an OS Command9.8 Critical9.3 Critical1%Oct 29, 2026
CVE-2026-96767: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 29, 2026
CVE-2026-92086: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 29, 2026
CVE-2026-5702: Cross-Site Request Forgery (CSRF)N/A4.8 Medium0%Oct 29, 2026
CVE-2026-5700: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-5699: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-5698: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-5697: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-27401: Missing Authorization5.3 MediumN/A0%Oct 29, 2026
CVE-2026-119028: Improper Control of Generation of Code8.8 High8.7 High0%Oct 29, 2026
CVE-2026-119027: Improper Control of Generation of Code7.5 High7.7 High0%Oct 29, 2026
CVE-2026-119025: Improper Neutralization of Special Elements used in an OS Command7.5 High7.7 High1%Oct 29, 2026
CVE-2026-115821: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 29, 2026
CVE-2026-110184: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Oct 29, 2026
CVE-2026-109822: Insecure Storage of Sensitive Information6.5 Medium7.1 High0%Oct 29, 2026
CVE-2026-109216: Improper Neutralization of Input During Web Page Generation4.9 MediumN/A0%Oct 29, 2026
CVE-2026-103665: Uncontrolled Search Path Element7.8 High8.4 High0%Oct 29, 2026
1176-1200 of 418637