The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6

TitleEitWModules
CVE-2026-111418: Server-Side Request Forgery (SSRF)7.5 HighN/A0%Oct 29, 2026
CVE-2026-111417: Authorization Bypass Through User-Controlled Key7.5 HighN/A0%Oct 29, 2026
CVE-2026-111318: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-110707: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 29, 2026
CVE-2026-109215: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 29, 2026
CVE-2026-107743: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 29, 2026
CVE-2026-107629: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-107627: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-104727: Improper Neutralization of Input During Web Page Generation6.4 MediumN/A0%Oct 29, 2026
CVE-2026-103875: Improper Neutralization of Input During Web Page Generation4.7 MediumN/A0%Oct 29, 2026
CVE-2026-103485: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-85498: Red Hat: A flaw was found in polkit3.5 LowN/A0%Oct 29, 2026
CVE-2026-7190: ICT Innovations ICT Innovations’ PHP-CGI/PHP-FPM configuration: A cross-site scripting (XSS) vulnerability in the ICTBroadcast software, which affects the demo environmentN/A5.1 Medium0%Oct 29, 2026
CVE-2026-115303: Improper Neutralization of CRLF Sequences3.7 LowN/A0%Oct 29, 2026
CVE-2026-114358: Improper Neutralization of Special Elements used in an SQL CommandN/A9.3 Critical1%Oct 29, 2026
CVE-2026-88941: Kaspersky: Kaspersky has fixed a vulnerability in the Network Agent for Windows module of Kaspersky Security Center5.2 Medium6.2 Medium0%Oct 29, 2026
CVE-2026-117174: Undefined Security WeaknessN/AN/AN/AOct 29, 2026
CVE-2025-62841: Use of Hard-coded Cryptographic KeyN/A8.7 High0%Oct 29, 2026
CVE-2025-62839: Use of Hard-coded Cryptographic KeyN/A8.7 High0%Oct 29, 2026
CVE-2026-118030: Concurrent Execution using Shared Resource with Improper Synchronization4.2 MediumN/A0%Oct 29, 2026
CVE-2026-117859: Always-Incorrect Control Flow Implementation5.4 MediumN/A0%Oct 29, 2026
CVE-2026-117688: Exposure of Sensitive Information to an Unauthorized Actor5.3 MediumN/A0%Oct 29, 2026
CVE-2026-117627: Missing Authorization5.4 MediumN/A0%Oct 29, 2026
CVE-2026-117548: NULL Pointer Dereference6.5 MediumN/A0%Oct 29, 2026
CVE-2026-93293: saadiqbal Password Protected – Protect Your Site Content With a Password: The Password Protected plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the bundled Freemius SDK's…6.4 MediumN/A0%Oct 29, 2026
1226-1250 of 415097
‹

Refine your search or filters to see more results.