The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-113694: Improper AuthorizationN/A5.3 Medium0%Oct 29, 2026
CVE-2026-113693: Exposure of Sensitive Information to an Unauthorized ActorN/A5.3 Medium0%Oct 29, 2026
CVE-2026-113692: Improper Limitation of a Pathname to a Restricted DirectoryN/A6.9 Medium0%Oct 29, 2026
CVE-2026-113691: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 29, 2026
CVE-2019-25781: Inefficient Algorithmic Complexity7.5 High8.7 High0%Oct 29, 2026
CVE-2026-93011: Out-of-bounds Write5.3 MediumN/A1%Oct 29, 2026
CVE-2026-93008: Insufficient Verification of Data Authenticity6.8 MediumN/A0%Oct 29, 2026
CVE-2026-93007: Uncontrolled Resource Consumption5.3 MediumN/A0%Oct 29, 2026
CVE-2026-93006: Operation on a Resource after Expiration or Release6.8 MediumN/A0%Oct 29, 2026
CVE-2026-56056: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-52709: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-49142: Improper Neutralization of Special Elements used in an SQL Command8.8 High8.7 High0%Oct 29, 2026
CVE-2026-48196: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-42703: Missing Authorization6.5 MediumN/A0%Oct 29, 2026
CVE-2026-39741: Missing Authorization5.3 MediumN/A0%Oct 29, 2026
CVE-2026-39735: Missing Authorization6.5 MediumN/A0%Oct 29, 2026
CVE-2026-24533: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-22386: Missing Authorization4.3 MediumN/A0%Oct 29, 2026
CVE-2026-118094: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-118093: Missing Authorization5.3 MediumN/A0%Oct 29, 2026
CVE-2026-118087: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Oct 29, 2026
CVE-2026-113690: Improper Neutralization of Input During Web Page GenerationN/A4.8 Medium0%Oct 29, 2026
CVE-2026-113689: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 29, 2026
CVE-2026-113688: Server-Side Request Forgery (SSRF)N/A5.3 Medium0%Oct 29, 2026
CVE-2026-93009: Out-of-bounds Read4.3 MediumN/A0%Oct 29, 2026
1176-1200 of 421285