The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6
TitleEitWModules
CVE-2026-71575: Insufficient Session Expiration9.1 CriticalN/A0%Oct 9, 2026
CVE-2026-108039: Improper Restriction of Recursive Entity References in DTDs7.5 HighN/A0%Oct 9, 2026
CVE-2026-107938: Improper Validation of Certificate with Host Mismatch9.1 CriticalN/A0%Oct 9, 2026
CVE-2026-107937: Allocation of Resources Without Limits or Throttling7.5 HighN/A1%Oct 9, 2026
CVE-2026-100227: Concurrent Execution using Shared Resource with Improper Synchronization7.5 HighN/A0%Oct 9, 2026
CVE-2026-71896: Incorrect Authorization6.5 MediumN/A0%Oct 8, 2026
CVE-2026-71895: Missing Authorization7.1 HighN/A0%Oct 8, 2026
CVE-2026-71183: Incorrect Authorization7.1 HighN/A0%Oct 8, 2026
CVE-2026-66087: Incorrect Authorization8.1 HighN/A0%Oct 8, 2026
CVE-2026-66084: Incorrect Authorization8.1 HighN/A0%Oct 8, 2026
CVE-2026-66082: Incorrect Authorization6.5 MediumN/A0%Oct 8, 2026
CVE-2026-87661: Improper Neutralization of CRLF Sequences5.7 Medium6.8 Medium0%Oct 8, 2026
CVE-2026-103371: Insertion of Sensitive Information into Log File7.5 HighN/A0%Oct 7, 2026
CVE-2026-92415: Use of Externally-Controlled Input to Select Classes or Code5.3 Medium6.9 Medium1%Oct 7, 2026
CVE-2026-92414: Session Fixation9.1 Critical9.3 Critical1%Oct 7, 2026
CVE-2026-97146: Authentication Bypass by SpoofingN/A4.8 Medium0%Oct 7, 2026
CVE-2026-92393: Incorrect AuthorizationN/A2.0 Low0%Oct 7, 2026
CVE-2026-78243: Uncaught ExceptionN/A2.1 Low0%Oct 7, 2026
CVE-2026-97720: Incorrect Implementation of Authentication Algorithm9.1 CriticalN/A0%Oct 7, 2026
CVE-2026-93684: Improper Neutralization of Input During Web Page Generation5.4 MediumN/A0%Oct 7, 2026
CVE-2026-90466: Relative Path Traversal6.5 MediumN/A1%Oct 7, 2026
CVE-2026-89417: Improper Neutralization of Input During Web Page Generation7.2 HighN/A0%Oct 7, 2026
CVE-2026-94114: Symbolic Name not Mapping to Correct Object5.9 Medium8.2 High0%Oct 6, 2026
CVE-2026-105244: Improper Encoding or Escaping of Output5.3 MediumN/A1%Oct 6, 2026
CVE-2026-105243: Insufficient Logging5.3 MediumN/A1%Oct 6, 2026
126-150 of 4390
‹›