The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-100133: Improper Neutralization of Input During Web Page Generation9.3 CriticalN/A1%Oct 13, 2026
CVE-2026-54641: openremote: OpenRemote is an open-source internet-of-things platform7.7 HighN/A0%Oct 13, 2026
CVE-2026-54640: openremote, io.openremote: OpenRemote is an open-source internet-of-things platform7.6 HighN/A0%Oct 13, 2026
CVE-2026-110101: Improper Neutralization of Input During Web Page Generation5.4 Medium5.1 Medium0%Oct 13, 2026
CVE-2026-104250: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 13, 2026
CVE-2026-54700: connectbot cbssh: ConnectBot SSH Client Library is written in Kotlin with Kaitai Struct and KStateMachineN/A6.9 Medium0%Oct 13, 2026
CVE-2026-49264: oauthlib: OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+6.1 MediumN/A0%Oct 13, 2026
CVE-2026-102672: Time-of-check Time-of-use (TOCTOU) Race Condition6.7 MediumN/A0%Oct 13, 2026
CVE-2026-102342: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109960: Improper Neutralization of Input During Web Page Generation7.7 High8.7 High0%Oct 13, 2026
CVE-2026-109761: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109749: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109748: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109733: Undefined Security Weakness8.1 HighN/A0%Oct 13, 2026
CVE-2026-109729: Use After Free5.4 MediumN/A0%Oct 13, 2026
CVE-2026-109722: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109721: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109720: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109716: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109715: Undefined Security WeaknessN/AN/A0%Oct 13, 2026
CVE-2026-109405: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109404: Server-Side Request Forgery (SSRF)5.3 Medium5.5 Medium0%Oct 13, 2026
CVE-2026-109403: Server-Side Request Forgery (SSRF)7.3 High5.5 Medium0%Oct 13, 2026
CVE-2026-109402: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
CVE-2026-109190: Server-Side Request Forgery (SSRF)6.3 Medium2.1 Low0%Oct 13, 2026
101-125 of 16381
‹›