The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
Microsoft Windows: CVE-2026-69802: Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88130: Role: DNS Server Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88129: Role: DNS Server Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88125: Role: DNS Server Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88123: Role: DNS Server Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88122: Role: DNS Server Denial of Service Vulnerability6.5 MediumN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88120: Windows DHCP Server Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88119: Windows DHCP Server Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88117: Windows DHCP Server Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88116: Windows Domain Name Service Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88114: Windows Domain Name Service Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88112: Windows Domain Name Service Remote Code Execution Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Windows: CVE-2026-88093: Desktop Window Manager Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft ASP.NET: CVE-2026-88092: ASP.NET Core Tampering Vulnerability9.4 CriticalN/A1%Oct 13, 2026
CVE-2026-88075: Microsoft: Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager…8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-87696: Microsoft Exchange Server Elevation of Privilege Vulnerability7.5 HighN/A0%Oct 13, 2026
Microsoft Exchange: CVE-2026-87695: Microsoft Exchange Server Elevation of Privilege Vulnerability7.8 HighN/A0%Oct 13, 2026
Microsoft Exchange: CVE-2026-87692: Microsoft Exchange Server Elevation of Privilege Vulnerability7.8 HighN/A2%Oct 13, 2026
CVE-2026-85873: Microsoft: Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…6.5 MediumN/A1%Oct 13, 2026
CVE-2026-83746: Microsoft: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…8.1 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-77910: Microsoft Exchange Server Elevation of Privilege Vulnerability8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-70571: Microsoft Exchange Server Remote Code Execution Vulnerability8.1 HighN/A1%Oct 13, 2026
CVE-2026-70297: Microsoft: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…8.8 HighN/A1%Oct 13, 2026
Microsoft Exchange: CVE-2026-70279: Microsoft Exchange Server Spoofing Vulnerability9.3 CriticalN/A1%Oct 13, 2026
Microsoft Windows Defender: CVE-2026-70264: Microsoft Defender Information Disclosure Vulnerability5.5 MediumN/A0%Oct 13, 2026
1301-1325 of 411120
‹›