The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118087: Improper Neutralization of Input During Web Page Generation6.5 MediumN/AN/AOct 29, 2026
CVE-2026-113690: Improper Neutralization of Input During Web Page GenerationN/A4.8 MediumN/AOct 29, 2026
CVE-2026-113689: Improper Neutralization of Input During Web Page GenerationN/A5.1 MediumN/AOct 29, 2026
CVE-2026-113688: Server-Side Request Forgery (SSRF)N/A5.3 MediumN/AOct 29, 2026
CVE-2026-93009: Red Hat: A flaw was found in dnsmasq4.3 MediumN/AN/AOct 29, 2026
CVE-2026-93010: Red Hat: A flaw was found in dnsmasq4.3 MediumN/AN/AOct 29, 2026
CVE-2026-97860: Yamaha Corporation: YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths6.7 Medium8.4 HighN/AOct 29, 2026
CVE-2026-97854: Yamaha Corporation NWR100: Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability9.8 Critical9.3 CriticalN/AOct 29, 2026
CVE-2026-96767: webaways NEX-Forms – Ultimate Forms Plugin for WordPress: The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting…7.2 HighN/AN/AOct 29, 2026
CVE-2026-92086: websoudan MW WP Form: The MW WP Form plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and…5.3 MediumN/AN/AOct 29, 2026
CVE-2026-5702: SABBATIC SABBATIC app: Cross-Site Request Forgery (CSRF) vulnerability in SABBATIC application that allows an attacker can trick an…N/A4.8 MediumN/AOct 29, 2026
CVE-2026-5700: SABBATIC SABBATIC app: Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript…N/A4.8 MediumN/AOct 29, 2026
CVE-2026-5699: SABBATIC SABBATIC app: Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript…N/A4.8 MediumN/AOct 29, 2026
CVE-2026-5698: SABBATIC SABBATIC app: Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript…N/A4.8 MediumN/AOct 29, 2026
CVE-2026-5697: SABBATIC SABBATIC app: Stored Cross-Site Scripting (XSS) vulnerability in SABBATIC application that allows an attacker to store JavaScript…N/A4.8 MediumN/AOct 29, 2026
CVE-2026-27401: Missing Authorization5.3 MediumN/AN/AOct 29, 2026
CVE-2026-119028: Improper Control of Generation of Code8.8 High8.7 HighN/AOct 29, 2026
CVE-2026-119027: Improper Control of Generation of Code7.5 High7.7 HighN/AOct 29, 2026
CVE-2026-119025: Improper Neutralization of Special Elements used in an OS Command7.5 High7.7 HighN/AOct 29, 2026
CVE-2026-115821: Improper Neutralization of Input During Web Page Generation7.2 HighN/AN/AOct 29, 2026
CVE-2026-110184: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/AN/AOct 29, 2026
CVE-2026-109822: Insecure Storage of Sensitive Information6.5 Medium7.1 HighN/AOct 29, 2026
CVE-2026-109216: Improper Neutralization of Input During Web Page Generation4.9 MediumN/AN/AOct 29, 2026
CVE-2026-103665: Uncontrolled Search Path Element7.8 High8.4 HighN/AOct 29, 2026
CVE-2026-71569: Apache Software Foundation Apache Camel: Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component4.8 MediumN/AN/AOct 29, 2026
1176-1200 of 415097