The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-92374: Time-of-check Time-of-use (TOCTOU) Race Condition7.8 HighN/A0%Oct 27, 2026
CVE-2026-92372: Write-what-where Condition8.8 HighN/A0%Oct 27, 2026
CVE-2026-90465: Authentication Bypass by SpoofingN/A9.4 Critical0%Oct 27, 2026
CVE-2026-90464: Improper Link Resolution Before File AccessN/A7.2 High0%Oct 27, 2026
CVE-2026-90442: Stack-based Buffer OverflowN/A8.6 High0%Oct 27, 2026
CVE-2026-82332: Improper AuthenticationN/A5.7 Medium0%Oct 27, 2026
CVE-2026-117511: Improper Neutralization of Special Elements used in an OS Command7.3 High5.5 Medium2%Oct 27, 2026
CVE-2026-117510: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Oct 27, 2026
CVE-2026-117509: Improper Limitation of a Pathname to a Restricted Directory6.3 Medium2.1 Low0%Oct 27, 2026
CVE-2026-115495: Cleartext Transmission of Sensitive InformationN/A5.7 Medium0%Oct 27, 2026
CVE-2026-113881: Stack-based Buffer OverflowN/A6.1 Medium0%Oct 27, 2026
CVE-2026-112710: Heap-based Buffer OverflowN/A9.2 Critical0%Oct 27, 2026
CVE-2026-112709: Heap-based Buffer OverflowN/A9.2 Critical0%Oct 27, 2026
CVE-2026-111585: Integer Overflow or Wraparound8.8 HighN/A0%Oct 27, 2026
CVE-2026-111584: Improper Privilege Management7.3 HighN/A0%Oct 27, 2026
CVE-2026-111583: Improper Privilege Management7.3 HighN/A0%Oct 27, 2026
CVE-2026-111582: Improper Privilege Management7.3 HighN/A0%Oct 27, 2026
CVE-2026-111107: Improper Validation of Syntactic Correctness of InputN/A8.7 High0%Oct 27, 2026
CVE-2026-109823: Exposure of Sensitive System Information to an Unauthorized Control SphereN/A2.3 Low0%Oct 27, 2026
CVE-2026-107672: Improper Neutralization of Special Elements used in a Command8.8 HighN/A0%Oct 27, 2026
CVE-2026-107458: Undefined Security WeaknessN/AN/AN/AOct 27, 2026
CVE-2026-104381: Authentication Bypass by Capture-replayN/A6.0 Medium0%Oct 27, 2026
CVE-2026-104189: Missing Authentication for Critical Function7.5 HighN/A0%Oct 27, 2026
CVE-2026-103594: Stack-based Buffer OverflowN/A9.5 Critical0%Oct 27, 2026
CVE-2026-103593: Stack-based Buffer OverflowN/A7.1 High0%Oct 27, 2026
1201-1225 of 538495