The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-90921: Improper Handling of Length Parameter Inconsistency7.5 HighN/A0%Oct 12, 2026
CVE-2026-90920: Improper Control of Generation of Code9.8 CriticalN/A1%Oct 12, 2026
CVE-2026-90912: Uncontrolled Recursion7.5 HighN/A0%Oct 12, 2026
CVE-2026-90911: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 12, 2026
CVE-2026-49484: Insecure Temporary FileN/A5.1 Medium0%Oct 12, 2026
CVE-2026-49483: Incorrect Permission Assignment for Critical ResourceN/A8.9 High0%Oct 12, 2026
CVE-2026-96266: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96265: Improper Restriction of Operations within the Bounds of a Memory Buffer8.2 HighN/A0%Oct 12, 2026
CVE-2026-96264: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96263: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96262: Stack-based Buffer Overflow8.2 HighN/A0%Oct 12, 2026
CVE-2026-96261: Stack-based Buffer Overflow7.3 HighN/A0%Oct 12, 2026
CVE-2026-78673: Improper Input Validation7.5 HighN/A0%Oct 12, 2026
CVE-2026-75881: Uncontrolled Resource Consumption7.5 HighN/A0%Oct 12, 2026
CVE-2026-18537: Improper Control of Generation of Code8.7 HighN/A0%Oct 12, 2026
CVE-2026-18533: Improper Control of Generation of Code6.5 MediumN/A0%Oct 12, 2026
CVE-2026-18529: Improper Neutralization of Special Elements used in an OS Command8.7 HighN/A1%Oct 12, 2026
CVE-2026-18517: Improper Access Control7.7 HighN/A0%Oct 12, 2026
CVE-2026-18513: Improper Privilege Management7.2 HighN/A0%Oct 12, 2026
CVE-2026-16678: Missing Release of Resource after Effective Lifetime4.5 MediumN/A0%Oct 12, 2026
CVE-2026-105052: Improper Limitation of a Pathname to a Restricted Directory7.5 HighN/A1%Oct 12, 2026
CVE-2026-96012: Undefined Security Weakness9.9 CriticalN/A1%Oct 12, 2026
CVE-2026-104364: Improper Input Validation3.3 LowN/A0%Oct 12, 2026
CVE-2026-104332: Stack-based Buffer Overflow5.5 MediumN/A0%Oct 12, 2026
CVE-2025-27902: Use of Web Link to Untrusted Target with window.opener Access6.1 MediumN/A0%Oct 12, 2026
126-150 of 9776
‹›