The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-93858: Improper Neutralization of Special Elements used in an OS CommandN/A8.7 High0%Oct 8, 2026
CVE-2026-107678: Uncontrolled Recursion4.7 Medium5.7 Medium0%Oct 8, 2026
CVE-2026-107675: Key Exchange without Entity Authentication5.9 Medium6.0 Medium0%Oct 8, 2026
CVE-2026-85423: Missing Authentication for Critical Function8.8 High8.6 High0%Oct 8, 2026
CVE-2026-94581: Improper Neutralization of Special Elements used in an OS Command6.8 Medium8.5 High1%Oct 8, 2026
CVE-2026-94579: Improper Neutralization of Special Elements used in an OS Command8.0 High5.4 Medium3%Oct 8, 2026
CVE-2026-84897: Incomplete Internal State Distinction5.3 Medium6.9 Medium0%Oct 7, 2026
CVE-2026-83742: Integer Underflow (Wrap or Wraparound)8.8 High5.3 Medium0%Oct 7, 2026
CVE-2026-83540: Improper Authentication8.8 High7.7 High1%Oct 7, 2026
CVE-2026-81535: Missing Authorization9.1 Critical6.3 Medium0%Oct 7, 2026
CVE-2026-16516: Insufficient Verification of Data Authenticity7.4 High9.0 Critical0%Oct 7, 2026
CVE-2026-106583: Improper Control of Resource Identifiers7.8 HighN/A0%Oct 7, 2026
CVE-2026-106589: Least Privilege Violation2.9 LowN/A0%Oct 6, 2026
CVE-2026-106588: Improper Isolation or Compartmentalization3.1 LowN/A0%Oct 6, 2026
CVE-2026-106587: Access of Resource Using Incompatible Type3.3 LowN/A0%Oct 6, 2026
CVE-2026-106586: Always-Incorrect Control Flow Implementation4.3 MediumN/A0%Oct 6, 2026
CVE-2026-106585: Improper Handling of Highly Compressed Data (Data Amplification)6.5 MediumN/A0%Oct 6, 2026
CVE-2026-106584: Off-by-one Error3.3 LowN/A0%Oct 6, 2026
CVE-2026-106582: Covert Channel3.7 LowN/A0%Oct 6, 2026
CVE-2026-106555: Incorrect Resource Transfer Between Spheres7.5 HighN/A0%Oct 6, 2026
CVE-2026-106553: Incorrect Resource Transfer Between Spheres7.5 HighN/A0%Oct 6, 2026
CVE-2026-106552: Relative Path Traversal6.5 MediumN/A0%Oct 6, 2026
CVE-2026-103059: Authentication Bypass by Primary Weakness9.1 CriticalN/A0%Oct 6, 2026
CVE-2026-92821: Return of Wrong Status Code6.8 MediumN/A0%Oct 6, 2026
CVE-2026-89039: Improper Limitation of a Pathname to a Restricted Directory6.5 MediumN/A0%Oct 5, 2026
101-125 of 2138
‹›