The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-118984: Unverified Password Change5.5 Medium7.0 High0%Oct 29, 2026
CVE-2026-91153: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A1%Oct 29, 2026
CVE-2026-91152: Improper Neutralization of Input During Web Page Generation6.1 MediumN/A0%Oct 29, 2026
CVE-2026-118192: Improper Neutralization of Special Elements used in an SQL Command6.5 MediumN/A0%Oct 29, 2026
CVE-2026-117611: Improper Certificate ValidationN/A7.1 High0%Oct 29, 2026
CVE-2026-116763: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-111419: Use of Hard-coded Credentials8.6 HighN/A0%Oct 29, 2026
CVE-2026-111418: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Oct 29, 2026
CVE-2026-111417: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Oct 29, 2026
CVE-2026-111318: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-110707: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 29, 2026
CVE-2026-109215: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 29, 2026
CVE-2026-107743: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 29, 2026
CVE-2026-107629: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-107627: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-104727: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 29, 2026
CVE-2026-103875: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 29, 2026
CVE-2026-103485: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-85498: Out-of-bounds Read3.5 LowN/A0%Oct 29, 2026
CVE-2026-7190: Improper Neutralization of Input During Web Page GenerationN/A5.1 Medium0%Oct 29, 2026
CVE-2026-115303: Improper Neutralization of CRLF Sequences3.7 LowN/A0%Oct 29, 2026
CVE-2026-114358: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical1%Oct 29, 2026
CVE-2026-88941: Missing Authentication for Critical Function5.2 Medium6.2 Medium0%Oct 29, 2026
CVE-2026-117174: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2025-62841: Use of Hard-coded Cryptographic KeyN/A8.7 High0%Oct 29, 2026
1226-1250 of 418637
‹

Refine your search or filters to see more results.