The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-101306: Improper Check for Dropped Privileges9.8 CriticalN/A0%Oct 15, 2026
CVE-2026-101305: Improper Check for Dropped Privileges8.8 HighN/A0%Oct 15, 2026
CVE-2026-101304: Improper Check for Dropped PrivilegesN/AN/A0%Oct 15, 2026
CVE-2026-101303: Incorrectly Specified Destination in a Communication Channel7.5 HighN/A0%Oct 15, 2026
CVE-2026-101302: Off-by-one Error6.5 MediumN/A0%Oct 15, 2026
CVE-2025-68404: Time-of-check Time-of-use (TOCTOU) Race ConditionN/A7.5 High0%Oct 15, 2026
CVE-2025-68403: External Control of System or Configuration SettingN/A4.6 Medium0%Oct 15, 2026
CVE-2025-66275: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.7 High0%Oct 15, 2026
CVE-2025-66272: Improper Limitation of a Pathname to a Restricted Directory6.5 Medium7.7 High0%Oct 15, 2026
CVE-2025-29897: Buffer Copy without Checking Size of InputN/A2.3 Low0%Oct 15, 2026
CVE-2025-29896: NULL Pointer DereferenceN/A2.3 Low0%Oct 15, 2026
CVE-2025-29895: NULL Pointer DereferenceN/A2.3 Low0%Oct 15, 2026
CVE-2026-88043: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-86803: Improper Control of Generation of Code6.5 MediumN/A0%Oct 15, 2026
CVE-2026-78087: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-78001: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-18586: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-18557: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 15, 2026
CVE-2026-18548: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 15, 2026
CVE-2026-17031: Missing Authorization8.1 HighN/A0%Oct 15, 2026
CVE-2026-17001: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 15, 2026
CVE-2026-15180: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 15, 2026
CVE-2026-15090: Improper Neutralization of Special Elements used in an SQL Command7.5 HighN/A0%Oct 15, 2026
CVE-2026-110926: Observable Discrepancy5.3 MediumN/A0%Oct 15, 2026
CVE-2026-110925: Improper Neutralization of Special Elements used in an OS Command5.4 MediumN/A0%Oct 15, 2026
1176-1200 of 406803
‹›